{"action":"Upgrade Autolab to 3.0.1 or later.","affected":[{"fixed":"3.0.1","introduced":"3.0.0"}],"component":"Autolab","cve_ids":["CVE-2024-49376"],"ecosystem":"RubyGems","epss":0.00467,"exploited":false,"fixed_versions":["3.0.1"],"ghsa_id":"GHSA-v46j-h43h-rwrm","id":"tcs_01M5KENDWF1JHPKQG6BXD24WPX","modified_at":"2024-11-15T01:00:12Z","published_at":"2024-10-25T19:21:43Z","references":["https://osv.dev/vulnerability/GHSA-v46j-h43h-rwrm","https://github.com/autolab/Autolab/security/advisories/GHSA-v46j-h43h-rwrm","https://nvd.nist.gov/vuln/detail/CVE-2024-49376","https://github.com/autolab/Autolab/commit/301689ab5c5e39d13bab47b71eaf8998d04bcc9b","https://github.com/autolab/Autolab"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-v46j-h43h-rwrm","url":"https://osv.dev/vulnerability/GHSA-v46j-h43h-rwrm"}],"summary":"Autolab Misconfigured Reset Password Permissions"}