CVE-2024-12125
3scale-porta: readonly fields not validated server-side
Résumé
3scale-porta: readonly fields not validated server-side
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in the 3scale Developer Portal. When creating or updating an account in the Developer Portal UI it is possible to modify fields explicitly configured as read-only or hidden, allowing an attacker to modify restricted information.
Références
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- report bugzilla.redhat.com
- web access.redhat.com
- web github.com