CVE-2024-44076

Description

In Microcks before 1.10.0, the POST /api/import and POST /api/export endpoints allow non-administrator access.

Affected Platforms

Weakness Type

NVD-CWE-noinfo, CWE-269

References

• https://github.com/microcks/microcks/compare/1.9.1-fix-1...1.10.0
• https://github.com/microcks/microcks/issues/1212
• https://github.com/microcks/microcks/releases/tag/1.10.0