Vulnerability Database

315,363

Total vulnerabilities in the database

CVE-2024-7476

A broken access control vulnerability exists in lunary-ai/lunary versions 1.2.7 through 1.4.2. The vulnerability allows an authenticated attacker to modify any user's templates by sending a crafted HTTP POST request to the /v1/templates/{id}/versions endpoint. This issue is resolved in version 1.4.3.

  • Published: Mar 20, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-7476
  • Exploit:

No technical information available.

CWEs:

OWASP TOP 10:

Software From Fixed in
lunary / lunary 1.2.7 1.4.3