CVE-2024-42759

MEDIUM CVSS: 6.3 Published: 2024-09-09 Modified: 2026-06-17

Description

An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplente endpoint.

Affected Platforms

Ellevo Ellevo

Weakness Type

CWE-592

References