CVE-2024-47308

Missing Authorization vulnerability in Templately allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Templately: from n/a through 3.1.2.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

EPSS

1.74% chance of exploitation in the next 30 days, 76th percentile

Nuclei

medium · CWE-862

Published

2024-11-01

Updated

2026-04-28

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-47308.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2024-4730
• CVE-2024-4731
• CVE-2024-4729
• CVE-2024-4732
• CVE-2024-4728
• CVE-2024-4735