Authorization Bypass Through User-Controlled Key Vulnerability

CVE-2024-43322

What is CVE-2024-43322?

The Zephyr Project Manager is affected by an authorization bypass vulnerability that stems from user-controlled key manipulation. This vulnerability allows attackers to gain unauthorized access to sensitive functionalities and data within the application. It is critical for users of the Zephyr Project Manager, particularly those running versions from n/a through 3.3.100, to evaluate their exposure to this vulnerability and implement necessary security measures to mitigate potential risks.

References