Description
NATO NCI ANET 3.4.1 allows Insecure Direct Object Reference via a modified ID field in a request for a private draft report (that belongs to an arbitrary user).
High · 8.1
CVE-2024-38447
EUVD-2024-37336GHSA-mq58-p8pv-xx7f
NATO NCI ANET 3.4.1 allows Insecure Direct Object Reference via a modified ID field in a request for a private draft report (that belongs t…
Published Jul 17, 2024 · Updated Aug 2, 2024 · Assigned by mitre