CVE-2024-7473

Published: 2024-10-29T13:15Z

Last Modified: 2024-11-03T17:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An IDOR vulnerability exists in the 'Evaluations' function of the 'umgws datasets' section in lunary-ai/lunary versions 1.3.2. This vulnerability allows an authenticated user to update other users' prompts by manipulating the 'id' parameter in the request. The issue is fixed in version 1.4.3. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt