Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-6695

profile-builder <= 3.11.8 - Unauthenticated Privilege Escalation

Description

it's possible for an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions. This is due to improper logic flow on the user registration process.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown User Profile Builder

Default version status: unaffected

  • 0 to < 3.11.9affected

References