High · 7.5 CVE-2024-50650 EUVD-2024-45200GHSA-qf6r-242x-wpg6

python_book V1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different …

Published Nov 15, 2024 · Updated Dec 3, 2024 · Assigned by mitre

Description

python_book V1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter.

References

https://github.com/Yllxx03/CVE/blob/main/python_book/BrokenAccessControl.md
https://github.com/Yllxx03/CVE/tree/main/CVE-2024-50650