CVE-2024-46310

—

CVSS 3.1

9.1 critical

EPSS

2%p84

Published

Jan 13, 2025 (Jan 13, 2025)

Modified

Jul 5, 2026

Description

Incorrect Access Control in Cfx.re FXServer v9601 and earlier allows unauthenticated users to modify and read arbitrary user data via exposed API endpoint

Weakness: CWE-281
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (2.5%)

In the news0 stories

No ingested article mentions this CVE yet.