Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A weakness has been identified in OpenBoxes up to 0.9.2. This vulnerability affects unknown code of the file grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy of the component Product Supplier Edit Controller. Executing a manipulation can lead to improper authorization. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.9.3 is able to resolve this issue. This patch is called f767ac1a5987d4865d9f158c6a967680f8e45468. It is suggested to upgrade the affected component.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2024-14045 Improper Authorization in OpenBoxes Product Supplier Edit Controller Up To 0.9.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-14045
Post summary
The post reports CVE-2024-14045, an improper authorization flaw in OpenBoxes up to version 0.9.2, but offers only a brief description and a generic link, with no PoC, exploit, patch, or active exploitation details.