Microcks's POST /api/import and POST /api/export endpoints allow non-administrator access · CVE-2024-44076 · GitHub Advisory Database · GitHub

Microcks's POST /api/import and POST /api/export endpoints allow non-administrator access

Moderate severity GitHub Reviewed Published Aug 19, 2024 to the GitHub Advisory Database • Updated Aug 19, 2024

Package

io.github.microcks:microcks-app (Maven)

Affected versions

< 1.10.0

Patched versions

1.10.0

Description

In Microcks before 1.10.0, the POST /api/import and POST /api/export endpoints allow non-administrator access.

References

Published by the National Vulnerability Database

Aug 19, 2024

Published to the GitHub Advisory Database Aug 19, 2024

Reviewed Aug 19, 2024

Last updated Aug 19, 2024