CVEvulnerability

CVE-2024-7956

7.6 HIGH Published 2026-09-02 Modified 2026-10-27 Official page ↗
Status
Awaiting Analysis
Published
2026-09-02
Last modified
2026-10-27
Assigner
[email protected]
CVSS 4.0 ([email protected])
7.6 HIGH — CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weaknesses
CWE-287

Description

A vulnerability exists in the affected products that allows a threat actor to gain access to user’s projects. To exploit this vulnerability the threat actor must have basic user privileges. If exploited, the threat actor can modify and delete the project.

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References