Access Control Vulnerability in Crocoblock JetEngine by Crocoblock

CVE-2023-48758

What is CVE-2023-48758?

Crocoblock JetEngine is associated with a vulnerability that arises from missing authorization mechanisms, specifically permitting exploitation through incorrectly configured access control security levels. This flaw may allow unauthorized access or manipulation of sensitive information within the JetEngine plugin. Affected versions include all prior to 3.2.4. Users are advised to assess their deployment and ensure compliance with best security practices to mitigate potential exploitation risks.

References