CVE-2024-10452CWE-639

Organization admins can delete pending invites created in an organization they are not part of

Low · published October 29, 2024

CVSS v3.1
2.2
EPSS
0%
Percentile
40.8
In the wild
Unconfirmed
What it is

Organization admins can delete pending invites created in an organization they are not part of.

The record
Technical detail
CVSS v3.1
2.2 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00486 · 40.8th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2024-10-29T15:16Z
EPSS history
Timeline
  • 29 OCT 15:16Z
    Organization admins can delete pending invites created in an organization they are not part of
    cvelistv5