Vulnerabilities > CVE-2024-51559 - Unspecified vulnerability in 63Moons Aero and Wave 2.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
NONE Integrity impact
HIGH Availability impact
NONE Summary
This vulnerability exists in the Wave 2.0 due to improper authorization checks on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating API input parameters to gain unauthorized access and perform malicious activities on other user accounts.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |