CVE-2024-29194

Summary

CVE-2024-29194 is a vulnerability affecting OneUptime, a service monitoring and management solution. The issue arises from the application's failure to adequately validate client-side stored data, specifically the is_master_admin key, located in the browser's local storage. An attacker can manipulate this key, changing it from false to true, thereby granting administrative privileges without proper server-side verification. This vulnerability has been rectified in version 7.0.1815.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.