What is CVE-2024-5389?

CVE-2024-5389 is a high-severity vulnerability in Lunary, classified under CWE-1220. CVSS score: 8.1/10. Published 2024-06-09.

How severe is CVE-2024-5389?

High severity. CVSS v3 base score is 8.1 out of 10.

Vulnerability in Lunary

CVE-2024-5389

In lunary-ai/lunary version 1.2.13, an insufficient granularity of access control vulnerability allows users to create, update, get, and delete prompt variations for datasets not owned by their organization. This issue arises due to the ap…

EPSS: 0.004 (34.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.

Affected products

Lunary — versions 1.2.13
Lunary-ai Lunary-ai/lunary — versions unspecified

Weakness classification (CWE)

CWE-1220

References

security@huntr.dev (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2024-5389?: CVE-2024-5389 is a high-severity vulnerability in Lunary, classified under CWE-1220. CVSS score: 8.1/10. Published 2024-06-09.
How severe is CVE-2024-5389?: High severity. CVSS v3 base score is 8.1 out of 10.