CVE-2024-46897

Name of the Vulnerable Software and Affected Versions Exment versions 6.1.4 and earlier Exment versions 5.0.11 and earlier

Description The issue is related to incorrect permission assignment for critical resources. A logged-in user with the permission of table management may obtain and/or alter the information of an unauthorized table.

Recommendations For Exment versions 6.1.4 and earlier, update to a version later than 6.1.4 to resolve the issue. For Exment versions 5.0.11 and earlier, update to a version later than 5.0.11 to resolve the issue. As a temporary workaround, consider restricting the permission of table management to minimize the risk of exploitation.