Unauthorized Access via Improper Logic Flow in User Registration Process
CVE-2024-6695
Currently unrated
Key Information:
- Vendor
Unspecified
- Status
- Vendor
- CVE Published:
- 31 July 2024
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2024-6695?
it's possible for an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions. This is due to improper logic flow on the user registration process.
Affected Version(s)
User Profile Builder 0 < 3.11.9
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.