CVE-2024-10272 — Broken Access Control in lunary-ai/lunary
lunary-ai/lunary is vulnerable to broken access control in the latest version. An attacker can view the content of any dataset without any kind of authorization by sending a GET…
Published: 2025-03-20 · CVSS: 7.5 · CVSS 3.0
lunary-ai/lunary is vulnerable to broken access control in the latest version. An attacker can view the content of any dataset without any kind of authorization by sending a GET request to the /v1/datasets endpoint without a valid authorization token.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7