CVE-2024-6738: WisdomGarden Tronclass - Broken Access Control
The tumbnail API of Tronclass from WisdomGarden lacks proper access control, allowing unauthenticated remote attackers to obtain certain specific files by modifying the URL.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WisdomGarden Tronclass (tumbnail API)to a version that resolves this vulnerability.Fixed in 1.69.61976
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6738?
CVE-2024-6738 is classified as a high severity vulnerability due to its potential for unauthorized access to sensitive files.
How do I fix CVE-2024-6738?
To fix CVE-2024-6738, implement proper access controls for the thumbnail API in the affected Tronclass version.
What software is affected by CVE-2024-6738?
CVE-2024-6738 affects all versions of WisdomGarden Tronclass up to 1.69.61976.
What type of attack does CVE-2024-6738 enable?
CVE-2024-6738 enables unauthenticated remote attackers to access specific files by modifying the thumbnail API URL.
Who is impacted by CVE-2024-6738?
Organizations using the affected versions of WisdomGarden Tronclass are at risk if they have not secured their API access.