CVE-2024-46054

Description

OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files.

References

https://github.com/davidguva/OpenVidReview/blob/main/routes/upload.js

https://github.com/davidguva/OpenVidReview

https://github.com/b1d0ws/CVEs/blob/main/CVE-2024-46054.md

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3