CVE-2024-12125
3scale-porta: readonly fields not validated server-side
Summary
3scale-porta: readonly fields not validated server-side
Original description
The description as published by the source.
A flaw was found in the 3scale Developer Portal. When creating or updating an account in the Developer Portal UI it is possible to modify fields explicitly configured as read-only or hidden, allowing an attacker to modify restricted information.
References
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- report bugzilla.redhat.com
- web access.redhat.com
- web github.com