Rest Api to Miniprogram
Jianbo · 2 CVEs
CVE-2024-8485
CRITICAL
REST API TO MiniProgram <= 4.7.1 - Unauthenticated Arbitrary User Email Update and Privilege Escalation via Account Tak…
Sep 25, 2024
CVE-2024-8484
HIGH
REST API TO MiniProgram <= 4.7.1 - Unauthenticated SQL Injection
Sep 25, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2024-8485 | REST API TO MiniProgram <= 4.7.1 - Unauthenticated Arbitrary User Email Update and Privilege Escalation via Account Takeover | CRITICAL | 0.59% | Sep 25, 2024 |
| CVE-2024-8484 | REST API TO MiniProgram <= 4.7.1 - Unauthenticated SQL Injection | HIGH | 3.76% | Sep 25, 2024 |
Showing 1 to 2 of 2 CVEs