Description
Due to a lack of access control, unauthorized users are able to view and modify information pertaining to other users.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| changeweb | changeweb/unifiedtransform | unspecified – ≤ latest | — |
High · 7.1
CVE-2024-2292
EUVD-2024-27247GHSA-xv4c-2443-pc28
Access Control Vulnerabilities lead to Violation of Privacy and Modification of Personal Data
Published Mar 20, 2025 · Updated Oct 15, 2025 · Assigned by @huntr_ai