~ / search / GHSA-v46j-h43h-rwrm

GHSA-v46j-h43h-rwrm

Autolab Misconfigured Reset Password Permissions

Source: GitHub Advisory Database (reviewed) High CVE-2024-49376

Packages

EcosystemPackageAffectedFixed in
RubyGems Autolab >= 3.0.0, < 3.0.1 3.0.1

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact For email-based accounts, users with insufficient privileges could reset and theoretically access privileged users' accounts by resetting their passwords. ### Patches This is fixed in v3.0.1. ### Workarounds No workarounds. ### For more information If you have any questions or comments about this advisory: Open an issue in https://github.com/autolab/Autolab/ Email us at [[email protected]](mailto:[email protected])

References

External links from the advisory. They lead to third-party sites.