CVE-2024-36691

MEDIUM · CVSS 6.3 EPSS 0.25%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-06-12 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.3. Exploitation may require the attacker to be authenticated.

CVE

CVE-2024-36691

Severity

MEDIUM

CVSS

6.3

EPSS

0.25%

Original NVD Description

Insecure permissions in the AdminController.AjaxSave() method of PPGo_Jobs v2.8.0 allows authenticated attackers to arbitrarily modify users' account information.