CVE-2024-6738 — WisdomGarden Tronclass - Broken Access Control
The tumbnail API of Tronclass from WisdomGarden lacks proper access control, allowing unauthenticated remote attackers to obtain certain specific files by modifying the URL.
Published: 2024-07-15 · CVSS: 5.3 · CVSS 3.1
The tumbnail API of Tronclass from WisdomGarden lacks proper access control, allowing unauthenticated remote attackers to obtain certain specific files by modifying the URL.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7