CVE-2024-51559

Medium

Description

This vulnerability exists in the Wave 2.0 due to improper authorization checks on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating API input parameters to gain unauthorized access and perform malicious activities on other user accounts.

SeverityMedium

CVSS6.5

Exploit probability—

Product63moons Wave

PublishedNov 4, 2024

First seenNov 4, 2024

Weakness typeCWE-639Authorization bypass through user-controlled key

How to fix

Update

63moons wave_2.01.1.7 or later
63moons aero120820241550 or later

Affected products

Product	Affected versions	Fixed in
63moons wave_2.0	v < 1.1.7	1.1.7
63moons aero	v < 120820241550	120820241550

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.