CVEvulnerability

CVE-2024-2412

5.3 MEDIUM Published 2024-03-13 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2024-03-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-1220

Description

The disabling function of the user registration page for Heimavista Rpage and Epage is not properly implemented, allowing remote attackers to complete user registration on sites where user registration is supposed to be disabled.

Related

Weakness · CWE (1)

  • CWE-1220 Insufficient Granularity of Access Control weakness

References