Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2024-42165

Arbitrary User Activation

Description

Insufficiently random values for generating activation token in FIWARE Keyrock <= 8.4 allow attackers to activate accounts of any user by predicting the token for the activation link.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FIWARE FIWARE Keyrock

Default version status: unaffected

  • 0 to ≤ 8.4affected

References