deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-45298
Published: 2024-09-18
Description: Wiki.js is an open source wiki app built on Node.js. A disabled user can still gain access to a wiki by abusing the password reset function. While setting up SMTP e-mail's on my server, I tested said e-mails by performing a password reset with my test user. To my shock, not only did it let me reset my password, but after resetting my password I can get into the wiki I was locked out of. The ramifications of this bug is a user can **bypass an account disabling by requesting their password be reset**.  All users of wiki.js version `2.5.303` who use any account restrictions and have disabled user are affected. This issue has been addressed in version 2.5.304 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-670
References: https://github.com/requarks/wiki/commit/b9fb17d4d4a0956ec35e8c73cc85192552fb8d16; https://github.com/requarks/wiki/security/advisories/GHSA-vwww-c5vg-xgfc
CVE: CVE-2024-45813
Published: 2024-09-18
Description: find-my-way is a fast, open source HTTP router, internally using a Radix Tree (aka compact Prefix Tree), supports route params, wildcards, and it's framework independent. A bad regular expression is generated any time one has two parameters within a single segment, when adding a `-` at the end, like `/:a-:b-`. This may cause a denial of service in some instances. Users are advised to update to find-my-way v8.2.2 or v9.0.1. or subsequent versions. There are no known workarounds for this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1333
References: https://blakeembrey.com/posts/2024-09-web-redos; https://github.com/delvedor/find-my-way/commit/5e9e0eb5d8d438e06a185d5e536a896572dd0440; https://github.com/delvedor/find-my-way/security/advisories/GHSA-rrr8-f88r-h8q6
CVE: CVE-2024-46990
Published: 2024-09-18
Description: Directus is a real-time API and App dashboard for managing SQL database content. When relying on blocking access to localhost using the default `0.0.0.0` filter a user may bypass this block by using other registered loopback devices (like `127.0.0.2` - `127.127.127.127`). This issue has been addressed in release versions 10.13.3 and 11.1.0. Users are advised to upgrade. Users unable to upgrade may block this bypass by manually adding the `127.0.0.0/8` CIDR range which will block access to any `127.X.X.X` ip instead of just `127.0.0.1`.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-284, CWE-918
References: https://github.com/directus/directus/commit/4aace0bbe57232e38cd6a287ee475293e46dc91b; https://github.com/directus/directus/commit/769fa22797bff5a[PII_REDACTED]b391e013f122e52; https://github.com/directus/directus/commit/8cbf943b65fd4a763d09a5fdbba8996b1e7797ff
CVE: CVE-2023-41610
Published: 2024-09-18
Description: Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext.
CVSS Score: 8.8 (HIGH)
CWE: CWE-256, CWE-798
References: https://www.trevorkems.com/operation-big-brother-iot-camera/
CVE: CVE-2023-41611
Published: 2024-09-18
Description: Victure PC420 1.1.39 was discovered to use a weak and partially hardcoded key to encrypt data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-798
References: https://www.trevorkems.com/operation-big-brother-iot-camera/
CVE: CVE-2023-41612
Published: 2024-09-18
Description: Victure PC420 1.1.39 was discovered to use a weak encryption key for the file enabled_telnet.dat on the Micro SD card.
CVSS Score: 8.8 (HIGH)
CWE: CWE-798
References: https://www.trevorkems.com/operation-big-brother-iot-camera/
CVE: CVE-2024-34399
Published: 2024-09-18
Description: **UNSUPPORTED WHEN ASSIGNED** An issue was discovered in BMC Remedy Mid Tier 7.6.04. An unauthenticated remote attacker is able to access any user account without using any password. NOTE: This vulnerability only affects products that are no longer supported by the maintainer and the impacted version for this vulnerability is 7.6.04 only.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2024-45523
Published: 2024-09-18
Description: An issue was discovered in Bravura Security Fabric versions 12.3.x before 12.3.5.32784, 12.4.x before 12.4.3.35110, 12.5.x before 12.5.2.35950, 12.6.x before 12.6.2.37183, and 12.7.x before 12.7.1.38241. An unauthenticated attacker can cause a resource leak by issuing multiple failed login attempts through API SOAP.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-307
References: https://www.bravurasecurity.com/cve-2024-45523-resource-leak-in-api-after-a-failed-login-attempt
CVE: CVE-2024-45601
Published: 2024-09-18
Description: Mesop is a Python-based UI framework designed for rapid web apps development. A vulnerability has been discovered and fixed in Mesop that could potentially allow unauthorized access to files on the server hosting the Mesop application. The vulnerability was related to insufficient input validation in a specific endpoint. This could have allowed an attacker to access files not intended to be served. Users are strongly advised to update to the latest version of Mesop immediately. The latest version includes a fix for this vulnerability. At time of publication 0.12.4 is the most recently available version of Mesop.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-22
References: https://github.com/google/mesop/commit/17fb769d6a91f0a8cbccfab18f64977b158a6a31; https://github.com/google/mesop/security/advisories/GHSA-pmv9-3xqp-8w42
CVE: CVE-2024-46959
Published: 2024-09-18
Description: runofast Indoor Security Camera for Baby Monitor has a default password of password for the root account. This allows access to the /stream1 URI via the rtsp:// protocol to receive the video and audio stream.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-259
References: https://werewolves.world/blog/09072024
CVE: CVE-2024-46978
Published: 2024-09-18
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible for any user knowing the ID of a notification filter preference of another user, to enable/disable it or even delete it. The impact is that the target user might start loosing notifications on some pages because of this. This vulnerability is present in XWiki since 13.2-rc-1. This vulnerability has been patched in XWiki 14.10.21, 15.5.5, 15.10.1, 16.0-rc-1. The patch consists in checking properly the rights of the user before performing any action on the filters. Users are advised to upgrade. It's possible to fix manually the vulnerability by editing the document `XWiki.Notifications.Code.NotificationPreferenceService` to apply the changes performed in commit e8acc9d8e6af7dfbfe70716ded431642ae4a6dd4.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-648
References: https://github.com/xwiki/xwiki-platform/commit/e8acc9d8e6af7dfbfe70716ded431642ae4a6dd4; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-r95w-889q-x2gx; https://jira.xwiki.org/browse/XWIKI-20337
CVE: CVE-2024-46979
Published: 2024-09-18
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to get access to notification filters of any user by using a URL such as `<hostname>xwiki/bin/get/XWiki/Notifications/Code/NotificationFilterPreferenceLivetableResults?outputSyntax=plain&type=custom&user=<username>`. This vulnerability impacts all versions of XWiki since 13.2-rc-1. The filters do not provide much information (they mainly contain references which are public data in XWiki), though some info could be used in combination with other vulnerabilities. This vulnerability has been patched in XWiki 14.10.21, 15.5.5, 15.10.1, 16.0RC1.  The patch consists in checking the rights of the user when sending the data. Users are advised to upgrade. It's possible to workaround the vulnerability by applying manually the patch: it's possible for an administrator to edit directly the document `XWiki.Notifications.Code.NotificationFilterPreferenceLivetableResults` to apply the same changes as in the patch. See commit c8c6545f9bde6f5aade994aa5b5903a67b5c2582.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-359
References: https://github.com/xwiki/xwiki-platform/commit/c8c6545f9bde6f5aade994aa5b5903a67b5c2582; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-pg4m-3gp6-hw4w; https://jira.xwiki.org/browse/XWIKI-20336
CVE: CVE-2024-46986
Published: 2024-09-18
Description: Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. An arbitrary file write vulnerability accessible via the upload method of the MediaController allows authenticated users to write arbitrary files to any location on the web server Camaleon CMS is running on (depending on the permissions of the underlying filesystem). E.g. This can lead to a delayed remote code execution in case an attacker is able to write a Ruby file into the config/initializers/ subfolder of the Ruby on Rails application. This issue has been addressed in release version 2.8.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-74, CWE-22
References: https://codeql.github.com/codeql-query-help/ruby/rb-path-injection; https://github.com/owen2345/camaleon-cms/security/advisories/GHSA-wmjg-vqhv-q5p5; https://owasp.org/www-community/attacks/Path_Traversal
CVE: CVE-2024-46987
Published: 2024-09-18
Description: Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's download_private_file method allows authenticated users to download any file on the web server Camaleon CMS is running on (depending on the file permissions). This issue may lead to Information Disclosure. This issue has been addressed in release version 2.8.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 7.7 (HIGH)
CWE: CWE-22, CWE-200, CWE-22
References: https://codeql.github.com/codeql-query-help/ruby/rb-path-injection; https://github.com/owen2345/camaleon-cms/security/advisories/GHSA-cp65-5m9r-vc2c; https://owasp.org/www-community/attacks/Path_Traversal
CVE: CVE-2024-46989
Published: 2024-09-18
Description: spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications. Multiple caveats over the same indirect subject type on the same relation can result in no permission being returned when permission is expected. If the resource has multiple groups, and each group is caveated, it is possible for the returned permission to be "no permission" when permission is expected. Permission is returned as NO_PERMISSION when PERMISSION is expected on the CheckPermission API. This issue has been addressed in release version 1.35.3. Users are advised to upgrade. Users unable to upgrade should not use caveats or avoid the use of caveats on an indirect subject type with multiple entries.
CVSS Score: 3.7 (LOW)
CWE: CWE-269
References: https://github.com/authzed/spicedb/commit/d4ef8e1dbce1eafaf25847f4c0f09738820f5bf2; https://github.com/authzed/spicedb/security/advisories/GHSA-jhg6-6qrx-38mr
CVE: CVE-2024-34057
Published: 2024-09-18
Description: Triangle Microworks TMW IEC 61850 Client source code libraries before 12.2.0 lack a buffer size check when processing received messages. The resulting buffer overflow can cause a crash, resulting in a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://trianglemicroworks.com/products/source-code-libraries/iec-61850-scl-pages/what%27s-new; https://www.cisa.gov/news-events/ics-advisories/icsa-24-256-16
CVE: CVE-2024-8287
Published: 2024-09-18
Description: Anbox Management Service, in versions 1.17.0 through 1.23.0, does not validate the TLS certificate provided to it by the Anbox Stream Agent. An attacker must be able to machine-in-the-middle the Anbox Stream Agent from within an internal network before they can attempt to take advantage of this.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295, CWE-295
References: https://bugs.launchpad.net/anbox-cloud/+bug/2077570; https://discourse.ubuntu.com/t/anbox-cloud-1-23-1-has-been-released/48141; https://www.cve.org/CVERecord?id=CVE-2024-8287
CVE: CVE-2024-39339
Published: 2024-09-18
Description: A vulnerability has been discovered in all versions of Smartplay headunits, which are widely used in Suzuki and Toyota cars. This misconfiguration can lead to information disclosure, leaking sensitive details such as diagnostic log traces, system logs, headunit passwords, and personally identifiable information (PII). The exposure of such information may have serious implications for user privacy and system integrity.
CVSS Score: 7.5 (HIGH)
CWE: CWE-922
References: https://docs.google.com/document/d/1S-d8zyZreYYGSIr4zGww6F2iBfD63v10Z3YVbGnp2es/edit?usp=sharing; https://mohammedshine.github.io/CVE-2024-39339.html
CVE: CVE-2024-43024
Published: 2024-09-18
Description: Multiple stored cross-site scripting (XSS) vulnerabilities in RWS MultiTrans v7.0.23324.2 and earlier allow attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://community.rws.com/product-groups/translation_management/multitrans/w/releases/5112/multitrans-7-releases; https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2024-43024; https://github.com/tomdantuma/CVE/tree/main/2024-43024
CVE: CVE-2024-43025
Published: 2024-09-18
Description: An HTML injection vulnerability in RWS MultiTrans v7.0.23324.2 and earlier allows attackers to alter the HTML-layout and possibly execute a phishing attack via a crafted payload injected into a sent e-mail.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://community.rws.com/product-groups/translation_management/multitrans/w/releases/5112/multitrans-7-releases; https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2024-43025; https://github.com/tomdantuma/CVE/tree/main/2024-43025
CVE: CVE-2024-44589
Published: 2024-09-18
Description: Stack overflow vulnerability in the Login function in the HNAP service in D-Link DCS-960L with firmware 1.09 allows attackers to execute of arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: https://github.com/Xshacry/iot-vuln/blob/main/d-link/dcs-935l/readme.md; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2022-25768
Published: 2024-09-18
Description: The logic in place to facilitate the update process via the user interface lacks access control to verify if permission exists to perform the tasks. Prior to this patch being applied it might be possible for an attacker to access the Mautic version number or to execute parts of the upgrade process without permission. As upgrading in the user interface is deprecated, this functionality is no longer required.
CVSS Score: 7.0 (HIGH)
CWE: CWE-287, CWE-862
References: https://github.com/mautic/mautic/security/advisories/GHSA-x3jx-5w6m-q2fc
CVE: CVE-2023-30464
Published: 2024-09-18
Description: CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-290
References: https://gist.github.com/idealeer/e41c7fb3b661d4262d0b6f21e12168ba
CVE: CVE-2024-40568
Published: 2024-09-18
Description: Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute arbitrary code via the pb_adv_handle_tranaction_cont function in the src/mesh/pb_adv.c component
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/xiaobye-ctf/My-CVE/tree/main/BTstack/CVE-2024-40568
CVE: CVE-2024-46372
Published: 2024-09-18
Description: DedeCMS 5.7.115 is vulnerable to Cross Site Scripting (XSS) via the advertisement code box in the advertisement management module.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/gaorenyusi/gaorenyusi/blob/main/CVE-2024-46372.md
CVE: CVE-2024-46373
Published: 2024-09-18
Description: Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/gaorenyusi/gaorenyusi/blob/main/CVE-2024-46373.md
CVE: CVE-2024-46374
Published: 2024-09-18
Description: Best House Rental Management System 1.0 contains a SQL injection vulnerability in the delete_category() function of the file rental/admin_class.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/gaorenyusi/gaorenyusi/blob/main/CVE-2024-46374.md
CVE: CVE-2024-46375
Published: 2024-09-18
Description: Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the signup() function of the file rental/admin_class.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/gaorenyusi/gaorenyusi/blob/main/CVE-2024-46375.md
CVE: CVE-2024-46376
Published: 2024-09-18
Description: Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the update_account() function of the file rental/admin_class.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/gaorenyusi/gaorenyusi/blob/main/CVE-2024-46376.md
CVE: CVE-2024-46377
Published: 2024-09-18
Description: Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the save_settings() function of the file rental/admin_class.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/gaorenyusi/gaorenyusi/blob/main/CVE-2024-46377.md
CVE: CVE-2024-47050
Published: 2024-09-18
Description: Prior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/mautic/mautic/security/advisories/GHSA-73gr-32wg-qhh7
CVE: CVE-2024-47058
Published: 2024-09-18
Description: With access to edit a Mautic form, the attacker can add Cross-Site Scripting stored in the html filed. This could be used to steal sensitive information from the user's current session.
CVSS Score: 2.9 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/mautic/mautic/security/advisories/GHSA-xv68-rrmw-9xwf
CVE: CVE-2021-27917
Published: 2024-09-18
Description: Prior to this patch, a stored XSS vulnerability existed in the contact tracking and page hits report.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/mautic/mautic/security/advisories/GHSA-xpc5-rr39-v8v2
CVE: CVE-2022-25770
Published: 2024-09-18
Description: Mautic allows you to update the application via an upgrade script.

The upgrade logic isn't shielded off correctly, which may lead to vulnerable situation.

This vulnerability is mitigated by the fact that Mautic needs to be installed in a certain way to be vulnerable.
CVSS Score: 7.8 (HIGH)
CWE: CWE-306, CWE-306
References: https://github.com/mautic/mautic/security/advisories/GHSA-qf6m-6m4g-rmrc
CVE: CVE-2024-37406
Published: 2024-09-18
Description: In Brave Android prior to v1.67.116, domains in the Brave Shields popup are elided from the right instead of the left, which may lead to domain confusion.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://hackerone.com/reports/2501378
CVE: CVE-2024-47059
Published: 2024-09-18
Description: When logging in with the correct username and incorrect weak password, the user receives the notification, that their password is too weak.

However when an incorrect username is provided alongside with a weak password, the application responds with ’Invalid credentials’ notification.

This difference could be used to perform username enumeration.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/mautic/mautic/security/advisories/GHSA-8vff-35qm-qjvv
CVE: CVE-2024-7254
Published: 2024-09-19
Description: Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsParser or Java Protobuf Lite parser, or against Protobuf map fields, creates unbounded recursions that can be abused by an attacker.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-674, CWE-787
References: https://github.com/protocolbuffers/protobuf/commit/cc8b3483a5584b3301e3d43d17eb59704857ffaa; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-4533
Published: 2024-09-19
Description: The Limit Login Attempts Plus plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.1.0. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the X-Forwarded-For header with with a different IP Address that will be logged and can be used to bypass settings that may have blocked out an IP address or country from logging in.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-348, CWE-345
References: https://plugins.trac.wordpress.org/browser/limit-login-attempts-plus/trunk/core/LimitLoginAttempts.php#L1043; https://www.wordfence.com/threat-intel/vulnerabilities/id/aec7b59f-1c8a-4403-b33b-c119bd96ad9d?source=cve
CVE: CVE-2024-8364
Published: 2024-09-19
Description: The WP Custom Fields Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpcfs-preset shortcode in all versions up to, and including, 1.2.35 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/wp-custom-fields-search/trunk/plugin.php#L53; https://wordpress.org/plugins/wp-custom-fields-search/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/ef36a2a1-b3be-4270-8[PII_REDACTED]7b4b5?source=cve
CVE: CVE-2024-8850
Published: 2024-09-19
Description: The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'email' parameter when a placeholder such as {email} is used for the field in versions 4.9.9 to 4.9.16 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/mailchimp-for-wp/tags/4.9.16/config/default-form-content.php#L8; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3153075%40mailchimp-for-wp&new=3153075%40mailchimp-for-wp&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/1d2ba8ea-a75f-4069-b67d-f832acb1deef?source=cve
CVE: CVE-2024-46946
Published: 2024-09-19
Description: langchain_experimental (aka LangChain Experimental) 0.1.17 through 0.3.0 for LangChain allows attackers to execute arbitrary code through sympy.sympify (which uses eval) in LLMSymbolicMathChain. LLMSymbolicMathChain was introduced in fcccde406dd9e9b05fc9babcbeb9ff527b0ec0c6 (2023-10-05).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://cwe.mitre.org/data/definitions/95.html; https://docs.sympy.org/latest/modules/codegen.html; https://gist.github.com/12end/68c0c58d2564ef4141bccd[PII_REDACTED]#file-cve-2024-46946-txt
CVE: CVE-2024-47085
Published: 2024-09-19
Description: This vulnerability exists in Apex Softcell LD DP Back Office due to improper validation of certain parameters (cCdslClicentcode and cLdClientCode) in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to exposure of sensitive information belonging to other users.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-359
References: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0296