CVE-2024-48217: SiSMART v7.4.0 Insecure Direct Object Reference (IDOR) vulnerability. This allows attackers to escalate privileges horizontally via the dashboard.

CVE-2024-48217 describes an IDOR vulnerability within the dashboard of SiSMART v7.4.0. An attacker can exploit this vulnerability to perform horizontal privilege escalation, meaning they could access or modify data belonging to other users. With an SVRS of 30, while not critical, this vulnerability should still be addressed, as it could potentially lead to unauthorized access and data breaches. This is significant because it impacts data security and user privacy within the SiSMART system. Immediate patching or mitigation is required to prevent potential exploits and maintain the integrity of the system. The IDOR can be easily exploited if left unpatched.