CVE-2024-10953
data.all authenticated users can perform mutating update operations on persisted notification records
概要
data.all authenticated users can perform mutating update operations on persisted notification records
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An authenticated data.all user is able to perform mutating UPDATE operations on persisted Notification records in data.all for group notifications that their user is not a member of.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory aws.amazon.com
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com