Vulnerability CVE-2024-37767


Published: 2024-07-05

Description:
Insecure permissions in the component /api/admin/user of 14Finger v1.1 allows attackers to access all user information via a crafted GET request.

 References:
https://github.com/b1ackc4t/14Finger/issues/12

Copyright 2026, cxsecurity.com

 

Back to Top