admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-11-28 18:48:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2024/CVE-2024-42056.md
0xMarcio e1800aedb5 Update CVE sources 2024-08-26 18:34
2024-08-26 18:34:01 +00:00

734 B
Raw Blame History

CVE-2024-42056

Description

Retool (self-hosted enterprise) through 3.40.0 inserts resource authentication credentials into sent data. Credentials for users with "Use" permissions can be discovered (by an authenticated attacker) via the /api/resources endpoint. The earliest affected version is 3.18.1.

POC

Reference

No PoCs from references.

Github