Description

Insufficient checks in a web service made it possible to add comments to the comments block on another user's dashboard when it was not otherwise available (e.g., on their profile page).

Remediation

References

CVE-2024-25983

Related Vulnerabilities

MongoDb Reachable Assertion Vulnerability (CVE-2021-32037)

WordPress Plugin Translate WordPress-Google Language Translator Cross-Site Scripting (6.0.11)

phpList Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2008-6178)

WordPress Plugin PDF & Print by BestWebSoft Cross-Site Scripting (2.0.2)

Phusion Passenger Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2018-12029)

Severity

Medium

Classification

CVE-2024-25983 CWE-639 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities