CyberRota Analysis
AI-GeneratedA vulnerability exists in the file delivery/deli.py of the Delivery Deployment Endpoint in guohongze admin versions up to 0.61, allowing for an authorization bypass through manipulation of the project_id argument. This flaw can be exploited remotely, potentially enabling unauthorized access to sensitive functionalities. Organizations using affected versions should prioritize patching this vulnerability to mitigate the risk of exploitation, especially if they handle sensitive data or critical operations.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security vulnerability has been detected in guohongze adminset up to 0.61. Affected by this vulnerability is an unknown functionality of the file delivery/deli.py of the component Delivery Deployment Endpoint. The manipulation of the argument project_id leads to authorization bypass. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.