Vulnerabilities > CVE-2024-5755 - Unspecified vulnerability in Lunary

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

low complexity

lunary

NVD

Published: 2024-06-27

Updated: 2024-11-21

Summary

In lunary-ai/lunary versions <=v1.2.11, an attacker can bypass email validation by using a dot character ('.') in the email address. This allows the creation of multiple accounts with essentially the same email address (e.g., '[email protected]' and '[email protected]'), leading to incorrect synchronization and potential security issues.

Vulnerable Configurations

Part	Description	Count
Application	Lunary Lunary Lunary - Lunary Lunary 0.1.0 Lunary Lunary 0.1.1 Lunary Lunary 0.1.2 Lunary Lunary 0.1.3 Lunary Lunary 0.1.4 Lunary Lunary 0.1.5 Lunary Lunary 0.2.0 Lunary Lunary 0.2.1 Lunary Lunary 0.3.0 Lunary Lunary 0.3.1 Lunary Lunary 1.0.0 Lunary Lunary 1.0.1 Lunary Lunary 1.0.2 Lunary Lunary 1.1.0 Lunary Lunary 1.2.0 Lunary Lunary 1.2.1 Lunary Lunary 1.2.2 Lunary Lunary 1.2.3 Lunary Lunary 1.2.4 Lunary Lunary 1.2.5 Lunary Lunary 1.2.6 Lunary Lunary 1.2.7 Lunary Lunary 1.2.8 Lunary Lunary 1.2.9 Lunary Lunary 1.2.10 Lunary Lunary 1.2.11	27

Summary

Vulnerable Configurations

References