QSearchQSearch

CVE-2024-3306

7.5 HIGH

Authorization Bypass Through User-Controlled Key vulnerability in Utarit Information SoliClub allows Exploiting Incorrectly Configured Ac...

Published: 2024-09-12 · Last updated: 2026-06-03

Severity and scoring

CVSS
7.5 HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE
CWE-639

Affected products

VendorProduct
utaritsoliclub

Description

Authorization Bypass Through User-Controlled Key vulnerability in Utarit Information SoliClub allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SoliClub: before 4.4.0 for iOS, before 5.2.1 for Android.

Source: NVD

References

Related CVEs

Same vendor

  • CVE-2025-7358 — Use of Hard-coded Credentials vulnerability in Utarit Informatics Services Inc (7.5 HIGH)
  • CVE-2025-7047 — Missing Authorization vulnerability in Utarit Informatics Services Inc (4.3 MEDIUM)
  • CVE-2025-1031 — Authorization Bypass Through User-Controlled Key vulnerability in Utarit Informatics Services Inc (7.5 HIGH)
  • CVE-2025-1030 — Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Utarit Informatics Services Inc (7.5 HIGH)
  • CVE-2025-1029 — Use of Hard-coded Credentials vulnerability in Utarit Information Services Inc (7.5 HIGH)

Same CWE

  • CVE-2026-12204 — A vulnerability was determined in ShopXO up to 6.7.1 (7.3 HIGH)
  • CVE-2026-1291 — The Meow Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the REST AP... (4.3 MEDIUM)
  • CVE-2026-54361 — MISP contained multiple mass assignment vulnerabilities in the handling of collections, tag collections, event delegations, and shadow at...
  • CVE-2026-54360 — A mass assignment vulnerability exists in MISP’s sharing group creation endpoint
  • CVE-2026-54357 — An improper authorization vulnerability in MISP allowed an authenticated organization administrator to access or modify user settings bel...