Approved changes feed: RSS · Atom
cpe:2.3:a:lunary-ai:lunary:1.2.13:*:*:*:*:*:*:*
part: a version: 1.2.13 update: *
| Vendor | Lunary Ai (b8ab520b-5869-56bb-8f02-94405305398c) |
|---|---|
| Product | Lunary (bf962528-113b-5365-9dd5-c258cddbc5b5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-5389 |
vulnerable | 2026-06-08 06:56:15.782281 |
Insufficient Access Control in lunary-ai/lunary
MEDIUM (5.7)
In lunary-ai/lunary version 1.2.13, an insufficient granularity of access control vulnerability allows users to create, update, get, and delete prompt variations for datasets not owned by their organization. This issue arises due to the application not properly validating the ownership of dataset prompts and their variations against the organization or project of the requesting user. As a result, unauthorized modifications to dataset prompts can occur, leading to altered or removed dataset prompts without proper authorization. This vulnerability impacts the integrity and consistency of dataset information, potentially affecting the results of experiments.
Published: 2024-06-09T22:22:38.179Z
Updated: 2024-08-01T21:11:12.487Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.