Description
An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network by convincing a user to click on a malicious link.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | GroupMe | - | — |
Advisories 1
- MSRC-CVE-2024-38164 GroupMe Elevation of Privilege Vulnerability Microsoft Security Response Center · Jul 23, 2024
References
- GroupMe Elevation of Privilege Vulnerability vendor-advisory patch