Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Product Designer Missing Authorization Allows Unrestricted Access

CVE-2024-38726 · published 2 years ago
Summary

The Product Designer feature in a specific software version (1.0.33 and earlier) lacks proper access controls. This allows users to access and potentially modify data they shouldn't have access to. Update to the latest version of the software to fix this issue.

Original advisory text
Missing Authorization vulnerability in PickPlugins Product Designer allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Product Designer: from n/a through 1.0.33.
Missing Authorization vulnerability in PickPlugins Product Designer allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Product Designer: from n/a through 1.0.33.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-862Missing Authorization
Timeline
Published1 Nov 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-38726 · NVD
Track software like this
Free during beta