CVE-2024-37767

Published: 2024-07-05T17:15Z

Last Modified: 2024-11-21T09:24Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Insecure permissions in the component /api/admin/user of 14Finger v1.1 allows attackers to access all user information via a crafted GET request. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt