GitHub Advisoryadvisory · Maven
GHSA-r6ph-5fp2-3w2v Microcks's POST /api/import and POST /api/export endpoints allow non-administrator access
HIGH
Official page ↗
- Aliases
- CVE-2024-44076
- Ecosystem
- Maven
- Packages
- io.github.microcks:microcks-app
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-269, CWE-863
- Reviewed
- 2024-08-19
Affected packages
• Maven io.github.microcks:microcks-app: < 1.10.0 → fixed in 1.10.0
Description
In Microcks before 1.10.0, the POST /api/import and POST /api/export endpoints allow non-administrator access.
Related
Alias · CVE (1)
- CVE-2024-44076 In Microcks before 1.10.0, the POST /api/import and POST /api/export endpoints allow non-administrator access. vulnerability
References
- https://nvd.nist.gov/vuln/detail/CVE-2024-44076 advisory
- https://github.com/microcks/microcks/issues/1212 web
- https://github.com/microcks/microcks/commit/4bb98d76f050710e42f5978877fe70e2f6edabf0 web
- https://github.com/microcks/microcks/commit/a47d105eb45dac5a0712d6e6bf12b3a4347e5e68 web
- https://github.com/microcks/microcks package
- https://github.com/microcks/microcks/compare/1.9.1-fix-1...1.10.0 web
- https://github.com/microcks/microcks/releases/tag/1.10.0 web