Description

Incorrect access control in Adapt Learning Adapt Authoring Tool <= 0.11.3 allows attackers with Authenticated User roles to obtain email addresses via the "Get users" feature. The vulnerability occurs due to a flaw in permission verification logic, where the wildcard character in permitted URLs grants unintended access to endpoints restricted to users with Super Admin roles. This makes it possible for attackers to disclose the email addresses of all users.

INFO

Published Date :

2024-11-25T00:00:00.000Z

Last Modified :

2024-12-04T16:14:46.017Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2024-50671 vulnerability.

No data.

REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-50671.

URL Resource
https://github.com/adaptlearning/adapt_authoring cve-icon cve-icon
https://github.com/dos-m0nk3y/CVE/tree/main/CVE-2024-50671 cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact