๐ CVE-2024-1626 | lunary-ai lunary up to 0.x PATCH Request /v1/projects/:projectId unnecessary privileges
๐ก Newskategorie: Sicherheitslรผcken
๐ Quelle: vuldb.com
A vulnerability was found in lunary-ai lunary up to 0.x. It has been classified as critical. This affects an unknown part of the file /v1/projects/:projectId of the component PATCH Request Handler. The manipulation leads to execution with unnecessary privileges. This vulnerability is uniquely identified as CVE-2024-1626. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component. ...