CVE-2024-6087

An improper access control vulnerability exists in lunary-ai/lunary at the latest commit (a761d83) on the main branch. The vulnerability allows an attacker to use the auth tokens issued by the 'invite user' functionality to obtain valid JWT tokens. These tokens can be used to compromise target users upon registration for their own arbitrary organizations. The attacker can invite a target email, obtain a one-time use token, retract the invite, and later use the token to reset the password of the target user, leading to full account takeover.

• CWE-639

• https://github.com/lunary-ai/lunary/commit/844e8855c7a713dc7371766dba4125de4007b1cfPatch
• https://huntr.com/bounties/bd9f2301-11c7-4cbd-8d77-3e9225bd67e8Exploit, Third Party Advisory

Published

Sep 13, 2024

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-6081Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-6082A vulnerability, which was classified as problematic, has be…6.1
• CVE-2024-6083A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-6084A vulnerability has been found in itsourcecode Pool of Bethe…9.8
• CVE-2024-6085A path traversal vulnerability exists in the XTTS server inc…8.6
• CVE-2024-6086In version 1.2.7 of lunary-ai/lunary, any authenticated user…4.3
• CVE-2024-6088The LearnPress – WordPress LMS Plugin plugin for WordPress i…5.3
• CVE-2024-6089An input validation vulnerability exists in the Rockwell Aut…7.5
• CVE-2024-6090A path traversal vulnerability exists in gaizhenbiao/chuanhu…7.5
• CVE-2024-6091A vulnerability in significant-gravitas/autogpt version 0.5.…9.8
• CVE-2024-6093Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-6094The WP ULike WordPress plugin before 4.7.1 does not sanitis…4.8