Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-6738

WisdomGarden Tronclass - Broken Access Control

Description

The tumbnail API of Tronclass from WisdomGarden lacks proper access control, allowing unauthenticated remote attackers to obtain certain specific files by modifying the URL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WisdomGarden Tronclass

Default version status: unaffected

  • all to < 1.69.61976affected

References