High · 8.8 CVE-2024-46624 EUVD-2024-42177GHSA-qvjg-w42p-q7c5

An issue in InfoDom Performa 365 v4.0.1 allows authenticated attackers to elevate their privileges to Administrator via a crafted payload s…

Published Dec 3, 2024 · Updated Dec 4, 2024 · Assigned by mitre

Description

An issue in InfoDom Performa 365 v4.0.1 allows authenticated attackers to elevate their privileges to Administrator via a crafted payload sent to /api/users.

References

https://github.com/EchoSl0w/Research/blob/main/2024/CVE-2024-46624.md