Security Advisory

CVE-2024-7476

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-03-20 10:09:59

Last updated 2025-10-15 12:49:51

Assigner @huntr_ai

CVSS score 4.3

State PUBLISHED

Description

A broken access control vulnerability exists in lunary-ai/lunary versions 1.2.7 through 1.4.2. The vulnerability allows an authenticated attacker to modify any user's templates by sending a crafted HTTP POST request to the /v1/templates/{id}/versions endpoint. This issue is resolved in version 1.4.3.

← Browse all CVEs View on cve.org ↗