CVE-2024-38183

An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network.
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:microsoft:groupme:-:*:*:*:*:*:*:*

History

31 Dec 2024, 23:15

Type Values Removed Values Added
Summary (en) An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network by convincing a user to click on a malicious link. (en) An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network.
CVSS v2 : unknown
v3 : 8.8
v2 : unknown
v3 : 9.8

25 Sep 2024, 19:59

Type Values Removed Values Added
First Time Microsoft
Microsoft groupme
CPE cpe:2.3:a:microsoft:groupme:-:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
References () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38183 - () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38183 - Patch, Vendor Advisory

20 Sep 2024, 12:30

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad de control de acceso inadecuado en GroupMe permite a un atacante no autenticado elevar los privilegios en una red al convencer a un usuario de hacer clic en un enlace malicioso.

17 Sep 2024, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-09-17 19:15

Updated : 2024-12-31 23:15


NVD link : CVE-2024-38183

Mitre link : CVE-2024-38183

CVE.ORG link : CVE-2024-38183


JSON object : View

Products Affected

microsoft

  • groupme
CWE
CWE-918

Server-Side Request Forgery (SSRF)

NVD-CWE-noinfo