Vulnerability Details CVE-2024-49209
Archer Platform 2024.03 before version 2024.09 is affected by an API authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and upload additional system icons.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 20.7%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2024-49209
-
cpe:2.3:a:archerirm:archer:2024.03
-
cpe:2.3:a:archerirm:archer:2024.04
-
cpe:2.3:a:archerirm:archer:2024.06
-
cpe:2.3:a:archerirm:archer:2024.08