high8.8
CVE-2024-49376
Autolab Misconfigured Reset Password Permissions
Impact
### Impact For email-based accounts, users with insufficient privileges could reset and theoretically access privileged users' accounts by resetting their passwords. ### Patches This is fixed in v3.0.1. ### Workarounds No workarounds. ### For more information If you have any questions or comments about this advisory: Open an issue in https://github.com/autolab/Autolab/ Email us at [autolab-dev@andrew.cmu.edu](mailto:autolab-dev@andrew.cmu.edu)
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rubygems | Autolab | = 3.0.0 | 3.0.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Autolabproject | Autolab | Version 3.0.0 |