Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-12125

3scale-porta: readonly fields not validated server-side

Description

A flaw was found in the 3scale Developer Portal. When creating or updating an account in the Developer Portal UI it is possible to modify fields explicitly configured as read-only or hidden, allowing an attacker to modify restricted information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

3scale porta

Default version status: unaffected

  • 0 to < 3scale-2.16.0-GAaffected

Red Hat Red Hat 3scale API Management Platform 2

Default version status: affected

References