Description
VINCE versions before 3.0.9 is vulnerable to exposure of User information to authenticated users.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CERT/CC | VINCE | < 3.0.9 | 3.0.9 |
Medium · 4.4
CVE-2024-10469
EUVD-2024-33496GHSA-59xx-g8cv-87qw
CERT/CC VINCE versions before 3.0.9 allows authenticated user to access User Management view.
Published Oct 28, 2024 · Updated Aug 25, 2025 · Assigned by certcc