Authorization Bypass Through User-Controlled Key Vulnerability Affects KiviCare from n/a through 3.6.2

CVE-2024-35659

What is CVE-2024-35659?

An authorization bypass vulnerability exists in the KiviCare plugin, which allows attackers to manipulate user-controlled keys to access unauthorized resources. This flaw could lead to data breaches and potential exploitation of sensitive information stored within the application. The affected versions include 3.6.2 and earlier, making it crucial for users to assess their installations and apply necessary security measures to mitigate risks associated with this vulnerability.

References