24Oca
CVE-2024-23649 | Lemmy up to 0.19.0 API report improper authorization (GHSA-r64r-5h43-26qv)
A vulnerability classified as critical was found in Lemmy up to 0.19.0. This vulnerability affects unknown code of the file /api/v3/private_message/report of the component API. The manipulation leads to improper authorization. This vulnerability was named CVE-2024-23649. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.