CVE-2024-25983 LOW

CVE-2024-25983: Msa-24-0006: idor on dashboard comments block

Weakness CWE-639 · IDOR

Published February 19, 2024

Last update August 1, 2024

View on NVD All CVEs

CVSS base score

3.5/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality None

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

Insufficient checks in a web service made it possible to add comments to the comments block on another user's dashboard when it was not otherwise available (e.g., on their profile page).

Key dates

02Disclosure timeline

February 19, 2024 CVE published

August 1, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-25983 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/639.html