cve.bz

CVE-2024-10774

7.3 highEPSS 0.5%

High (7.3). EPSS 0.5% chance of exploitation in the next 30 days.

Unauthenticated CROWN APIs allow access to critical functions. This leads to the accessibility of large parts of the web application without authentication.

Severity

CVSS 3.1

7.3 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS
0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE
CWE-306
Published
Modified
Record from
the NVD, synced

References

Check your stackJSON