2024-06-07 16:03:12 +00:00

59 lines
2.7 KiB
JSON

{
"id": "CVE-2024-5248",
"sourceIdentifier": "security@huntr.dev",
"published": "2024-06-06T19:16:06.917",
"lastModified": "2024-06-07T14:56:05.647",
"vulnStatus": "Awaiting Analysis",
"descriptions": [
{
"lang": "en",
"value": "In lunary-ai/lunary version 1.2.5, an improper access control vulnerability exists due to a missing permission check in the `GET /v1/users/me/org` endpoint. The platform's role definitions restrict the `Prompt Editor` role to prompt management and project viewing/listing capabilities, explicitly excluding access to user information. However, the endpoint fails to enforce this restriction, allowing users with the `Prompt Editor` role to access the full list of users in the organization. This vulnerability allows unauthorized access to sensitive user information, violating the intended access controls."
},
{
"lang": "es",
"value": "En lunary-ai/lunary versi\u00f3n 1.2.5, existe una vulnerabilidad de control de acceso inadecuado debido a una falta de verificaci\u00f3n de permiso en el endpoint `GET /v1/users/me/org`. Las definiciones de funciones de la plataforma restringen la funci\u00f3n \"Editor de mensajes\" a la gesti\u00f3n de mensajes y las capacidades de visualizaci\u00f3n/enumeraci\u00f3n de proyectos, excluyendo expl\u00edcitamente el acceso a la informaci\u00f3n del usuario. Sin embargo, el endpoint no aplica esta restricci\u00f3n, lo que permite a los usuarios con la funci\u00f3n \"Editor de mensajes\" acceder a la lista completa de usuarios de la organizaci\u00f3n. Esta vulnerabilidad permite el acceso no autorizado a informaci\u00f3n confidencial del usuario, violando los controles de acceso previstos."
}
],
"metrics": {
"cvssMetricV30": [
{
"source": "security@huntr.dev",
"type": "Secondary",
"cvssData": {
"version": "3.0",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "security@huntr.dev",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
}
],
"references": [
{
"url": "https://huntr.com/bounties/4ec75087-5630-4813-952b-88ccabe6d117",
"source": "security@huntr.dev"
}
]
}