critical9.0
CVE-2024-55585
In the moPS App through 1.8.618, all users can access administrative API endpoints without additional authentication, resulting in unrestricted read and write …
Impact
In the moPS App through 1.8.618, all users can access administrative API endpoints without additional authentication, resulting in unrestricted read and write access, as demonstrated by /api/v1/users/resetpassword.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| MoPS | MoPS App | through 1.8.618 |
Versions were read from the advisory text. No structured product data has been published for this record yet.