cvedb.io
CVE-2024-40408
HIGH · CVSS 7.3
EPSS exploitation probability: 0%
Published 2024-11-13T23:15:04.060 · Last modified 2026-06-17T07:45:50.650

Summary

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges.

Affected products

cybelesoft — thinfinity_workspace

Does this affect you?

Add your gear to cvedb and we'll alert you only when cybelesoft ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.