Description
Insecure permissions in the component /api/admin/user of 14Finger v1.1 allows attackers to access all user information via a crafted GET request.
High · 7.5
CVE-2024-37767
EUVD-2024-36821GHSA-p36x-j8pc-9vcr
Insecure permissions in the component /api/admin/user of 14Finger v1.1 allows attackers to access all user information via a crafted GET re…
Published Jul 5, 2024 · Updated Nov 7, 2024 · Assigned by mitre