CVE-2024-25983CWE-639

Msa-24-0006: idor on dashboard comments block

Low · published February 19, 2024

CVSS v3.1
3.5
EPSS
1%
Percentile
48.1
In the wild
Unconfirmed
What it is

Insufficient checks in a web service made it possible to add comments to the comments block on another user's dashboard when it was not otherwise available (e.g., on their profile page).

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00602 · 48.1th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2024-02-19T16:32Z
EPSS history
Timeline
  • 19 FEB 16:32Z
    Msa-24-0006: idor on dashboard comments block
    cvelistv5