3scale vulnerabilities
Published CVEs affecting 3scale products: 1 record(s), with severity, exploitation and fixes.
CVE-2024-12125
High · 7.5
CWE-281 Nov 6, 2025
3scale-porta: readonly fields not validated server-side
A flaw was found in the 3scale Developer Portal. When creating or updating an account in the Developer Portal UI it is possible to modify fields explicitly configured as read-only or hidden, allowing an attacker to modify restricted information.