CVE-2024-12483

Name of the Vulnerable Software and Affected Versions Dromara UJCMS versions up to 9.6.3

Description A problematic vulnerability has been found in Dromara UJCMS, affecting an unknown part of the file /users/id of the component User ID Handler. The manipulation leads to authorization bypass. It is possible to initiate the attack remotely. The complexity of an attack is rather high, and the exploitability is told to be difficult.

Recommendations For versions up to 9.6.3, as a temporary workaround, consider restricting access to the /users/id endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.