Skip to content
OpenAdvisories

Vendor

CERN

3 known vulnerabilities.

1 result · Clear filters · Feed

  • None 0.0
    CVE-2024-50633 Public exploit

    Indico Insecure Access

    A Broken Object Level Authorization (BOLA) vulnerability in Indico through 3.3.5 allows attackers to read information by sending a crafted POST request to the component /api/principals. NOTE: this is disputed by the Supplier because the product intentionally …