3scale-porta vulnerabilities

CVEs whose affected-version data names the 3scale-porta package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-12125High· 7.5

1y ago

3scale-porta: readonly fields not validated server-side

A flaw was found in the 3scale Developer Portal. When creating or updating an account in the Developer Portal UI it is possible to modify fields explicitly configured as read-only or hidden, allowing an attacker to modify restricted info…

▾ Twilight3scale · portaEPSS 0.27%via CVEORG