CVE-2024-51556

6.5MEDIUM

This vulnerability exists in the Wave 2.0 due to insufficient encryption of sensitive data received at the API response. An authenticated remote attacker could exploit this vulnerability by manipulati

发布于: 11/4/2024更新于: 11/22/2024
在NVD查看在MITRE查看

描述

This vulnerability exists in the Wave 2.0 due to insufficient encryption of sensitive data received at the API response. An authenticated remote attacker could exploit this vulnerability by manipulating API input parameters through API request URL/payload leading to unauthorized access to sensitive information belonging to other users.

AI分析AI驱动

受影响产品

63moonsaero
63moonswave_2.0

参考资料