CVE-2024-11680 1

CVE-2024-11680: Project Send Improper Authentication Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Dec 03, 2024

ProjectSend contains an improper authentication vulnerability that allows a remote, unauthenticated attacker to enable unauthorized modification of the application's configuration via crafted HTTP requests to options.php. Successful exploitation allows...

Vulnerabilities & Patching