CVE-2024-7473

CVSS 3.1: 6.5 medium
EPSS: <1%p37
Published: Oct 29, 2024 · Oct 29, 2024
Modified: Jun 17, 2026

Analyze CVE-2024-7473 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An IDOR vulnerability exists in the 'Evaluations' function of the 'umgws datasets' section in lunary-ai/lunary versions 1.3.2. This vulnerability allows an authenticated user to update other users' prompts by manipulating the 'id' parameter in the request. The issue is fixed in version 1.4.3.

Vendors: lunary

Products: lunary

Weakness: CWE-639

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news

1 story

Researchers Uncover Vulnerabilities in Open

The Hacker NewsOct 29, 16:00 UTC · Oct 29, 2024VulnerabilityCVE-2024-7474 CVE-2024-7475 CVE-2024-7473+52 · 1 read