Description
A flaw was found in the 3scale Developer Portal. When creating or updating an account in the Developer Portal UI it is possible to modify fields explicitly configured as read-only or hidden, allowing an attacker to modify restricted information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| 3scale | porta | < 3scale-2.16.0-GA | 3scale-2.16.0-GA |
| Red Hat | Red Hat 3scale API Management Platform 2 | — | — |
References
- https://access.redhat.com/security/cve/CVE-2024-12125 vdb-entry
- RHBZ#2330214 issue-tracking