CVE-2024-45787

MEDIUM 6.5CVE-2024-45787 · Published 11/09/2024 · updated 17/06/2026

In short

CVE-2024-45787 is a MEDIUM (CVSS 6.5) vulnerability affecting aim-star (reedos).
Chance of exploitation in the next 30 days (EPSS): 0.44%, higher than 38.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
aim-star reedos	`= 2.0.1`	No fix yet

Description

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to transmission of sensitive information in plain text in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter through API request URL and intercepting response of the API request leading to exposure of sensitive information belonging to other users.

References

cert-in.org.in/s2cMainServlet · Third Party Advisory

More vulnerabilities in aim-star

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

aim-star

reedos

= 2.0.1

No fix yet

Description

More vulnerabilities in aim-star

See all →