What is GHSA-qp56-82vp-xqgv?

GHSA-qp56-82vp-xqgv is a security advisory published by GitHub Security Advisories with Medium severity. Mezzanine allows attackers to bypass access control mechanisms

Which CVE IDs does GHSA-qp56-82vp-xqgv cover?

GHSA-qp56-82vp-xqgv covers the following CVE IDs: CVE-2024-25169. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-qp56-82vp-xqgv?

GHSA-qp56-82vp-xqgv affects 1 product, including: pip/Mezzanine:\u003c= 6.0.0.

GHSA-qp56-82vp-xqgvMedium

Mezzanine allows attackers to bypass access control mechanisms

Vendor

GitHub Security Advisories

Published

February 28, 2024

Last Modified

February 28, 2024

🔗 CVE IDs covered (1)

CVE-2024-25169 →

📋 Description

An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request.

🎯 Affected products1

pip/Mezzanine:<= 6.0.0

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2024-25169
https://github.com/shenhav12/CVE-2024-25169-Mezzanine-v6.0.0
https://ibb.co/JKh4hmD
https://ibb.co/Pt9qd8t
https://ibb.co/hLLPTVp
https://ibb.co/rfrKj3r
https://github.com/advisories/GHSA-qp56-82vp-xqgv