3scale Porta vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting 3scale Porta: 1 record(s), with affected versions and fixes.

CVE-2024-12125 High · 7.5 CWE-281 Nov 6, 2025

3scale-porta: readonly fields not validated server-side

A flaw was found in the 3scale Developer Portal. When creating or updating an account in the Developer Portal UI it is possible to modify fields explicitly configured as read-only or hidden, allowing an attacker to modify restricted information.