Description
An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplente endpoint.
Medium · 6.3
CVE-2024-42759
EUVD-2024-39764GHSA-vw78-5596-vx6r
An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplente endpoint.
Published Sep 9, 2024 · Updated Sep 10, 2024 · Assigned by mitre