CVE-2024-12125
High · 7.5CVSS
7.5
EPSS
0.3%
Published
Nov 6, 2025
CISA due date
—
The record
A flaw was found in the 3scale Developer Portal. When creating or updating an account in the Developer Portal UI it is possible to modify fields explicitly configured as read-only or hidden, allowing an attacker to modify restricted information.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-61709 OpenFGA is an authorization and permission engine built for developers. CWE-281
- CVE-2026-58510 GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code… CWE-281
- CVE-2026-23556 When oxenstored is tearing a domain down, the node data is cleaned up but the usage… CWE-281
- CVE-2026-58494 Wasmtime is a runtime for WebAssembly. CWE-281
- CVE-2026-4360 In the Tarfile.extract() function, the filter parameter is not passed properly when… CWE-281
- CVE-2026-40767 Unauthenticated Broken Access Control in wpForo Forum < 3.0.2 versions. CWE-281
- CVE-2024-47270 Improper preservation of permissions vulnerability in Archiving Push functionality in… CWE-281
- CVE-2026-44832 Snipe-IT is an IT asset/license management system. CWE-281