Broken Access Control in Lunary AI Product

CVE-2024-10272

What is CVE-2024-10272?

The Lunary AI product exposes a significant vulnerability that allows unauthorized users to access sensitive datasets. By sending a GET request to the /v1/datasets endpoint, an attacker can retrieve data without needing a valid authorization token, potentially leading to the exposure of confidential information. Immediate remedial action is recommended to mitigate this risk and protect user data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References