Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9485-jr2m-q8rx

Опубликовано: 06 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.6

Описание

An improper access control vulnerability exists in the lunary-ai/lunary repository, specifically within the versions.patch functionality for updating prompts. Affected versions include 1.2.2 up to but not including 1.2.25. The vulnerability allows unauthorized users to update prompt details due to insufficient access control checks. This issue was addressed and fixed in version 1.2.25.

An improper access control vulnerability exists in the lunary-ai/lunary repository, specifically within the versions.patch functionality for updating prompts. Affected versions include 1.2.2 up to but not including 1.2.25. The vulnerability allows unauthorized users to update prompt details due to insufficient access control checks. This issue was addressed and fixed in version 1.2.25.

EPSS

Процентиль: 32%
0.00124
Низкий

7.6 High

CVSS3

Дефекты

CWE-284
CWE-862

Связанные уязвимости

CVSS3: 6.5
nvd
больше 1 года назад

An improper access control vulnerability exists in the lunary-ai/lunary repository, specifically within the versions.patch functionality for updating prompts. Affected versions include 1.2.2 up to but not including 1.2.25. The vulnerability allows unauthorized users to update prompt details due to insufficient access control checks. This issue was addressed and fixed in version 1.2.25.

EPSS

Процентиль: 32%
0.00124
Низкий

7.6 High

CVSS3

Дефекты

CWE-284
CWE-862