CyberRota Analysis
AI-GeneratedCohere North AI v1.1.5 is vulnerable due to improper access control, enabling attackers to overwrite user information by sending specially crafted requests to the /api/internal/v1/users/{{USER_ID}} endpoint. This flaw poses a significant risk as it could lead to unauthorized data manipulation and potential account compromise. Organizations using this version of Cohere North AI should prioritize remediation to protect user data integrity.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Incorrect access control in Cohere North AI v1.1.5 allows attackers to arbitrarily overwrite user info via a crafted request to the /api/internal/v1/users/{{USER_ID}} endpoint