CVE-2024-6738CWE-284

WisdomGarden Tronclass - Broken Access Control

Medium · published July 15, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
38.6
In the wild
Unconfirmed
What it is

The tumbnail API of Tronclass from WisdomGarden lacks proper access control, allowing unauthenticated remote attackers to obtain certain specific files by modifying the URL.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00456 · 38.6th percentile
Weakness
CWE-284 · Improper Access Control
Published
2024-07-15T02:50Z
EPSS history
Timeline
  • 15 JUL 02:50Z
    WisdomGarden Tronclass - Broken Access Control
    cvelistv5