github.com
https://github.com/b1ackc4t/14Finger/issues/12 CVE-2024-37769
HIGH
Record summary
CVE-2024-37769 has a selected CVSS score of 8.8 (high).
Description
Insecure permissions in 14Finger v1.1 allow attackers to escalate privileges from normal user to Administrator via a crafted POST request.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 22, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
14fingerBrowse b1ackc4t / 14fingerDefault status: unknown | CVE List | 1.1 | affected |
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-37769