The tumbnail API of Tronclass from WisdomGarden lacks proper access control, allowing unauthenticated remote attackers to obtain certain specific files by modifying the URL.
References
| Link | Resource |
|---|---|
| https://www.twcert.org.tw/en/cp-139-7926-f7914-2.html | Third Party Advisory |
| https://www.twcert.org.tw/tw/cp-132-7925-97e1c-1.html | Third Party Advisory |
| https://www.twcert.org.tw/en/cp-139-7926-f7914-2.html | Third Party Advisory |
| https://www.twcert.org.tw/tw/cp-132-7925-97e1c-1.html | Third Party Advisory |
Configurations
History
21 Nov 2024, 09:50
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.twcert.org.tw/en/cp-139-7926-f7914-2.html - Third Party Advisory | |
| References | () https://www.twcert.org.tw/tw/cp-132-7925-97e1c-1.html - Third Party Advisory |
16 Jul 2024, 14:06
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Wisdomgarden tronclass
Wisdomgarden |
|
| References | () https://www.twcert.org.tw/en/cp-139-7926-f7914-2.html - Third Party Advisory | |
| References | () https://www.twcert.org.tw/tw/cp-132-7925-97e1c-1.html - Third Party Advisory | |
| CPE | cpe:2.3:a:wisdomgarden:tronclass:*:*:*:*:*:*:*:* | |
| CWE | NVD-CWE-Other | |
| Summary |
|
15 Jul 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-07-15 03:15
Updated : 2024-11-21 09:50
NVD link : CVE-2024-6738
Mitre link : CVE-2024-6738
CVE.ORG link : CVE-2024-6738
JSON object : View
Products Affected
wisdomgarden
- tronclass
CWE