CVE-2024-12125 — 3scale-porta: readonly fields not validated server-side
A flaw was found in the 3scale Developer Portal. When creating or updating an account in the Developer Portal UI it is possible to modify fields explicitly configured as read-on…
Published: 2025-11-06 · CVSS: 7.5 · CVSS 3.1
A flaw was found in the 3scale Developer Portal. When creating or updating an account in the Developer Portal UI it is possible to modify fields explicitly configured as read-only or hidden, allowing an attacker to modify restricted information.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7