← Database

CVE-2024-6738

MEDIUM CVSS: 5.3 Published: 2024-07-15 Modified: 2026-06-17

Description

The tumbnail API of Tronclass from WisdomGarden lacks proper access control, allowing unauthenticated remote attackers to obtain certain specific files by modifying the URL.

Affected Platforms

Wisdomgarden Tronclass

Weakness Type

CWE-284, NVD-CWE-Other

References