1. Home
  2. CVE Database
  3. CVE-2024-53573
CRITICAL · 9.8

CVE-2024-53573

Unifiedtransform v2.X is vulnerable to Incorrect Access Control. Unauthorized users can access and manipulate endpoints intended exclusively for administrative use. This issue specifically affects tea...

Vulnerability Description

Unifiedtransform v2.X is vulnerable to Incorrect Access Control. Unauthorized users can access and manipulate endpoints intended exclusively for administrative use. This issue specifically affects teacher/edit/{id}.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
ChangewebUnifiedtransform2.0

Related Weaknesses (CWE)

CWE-284

References

FAQ

What is CVE-2024-53573?

CVE-2024-53573 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Unifiedtransform v2.X is vulnerable to Incorrect Access Control. Unauthorized users can access and manipulate endpoints intended exclusively for administrative use. This issue specifically affects tea...

How severe is CVE-2024-53573?

CVE-2024-53573 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2024-53573?

Check the references section above for vendor advisories and patch information. Affected products include: Changeweb Unifiedtransform.