CVE-2024-14045

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-14045
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-14045.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-14045
Published
2026-08-18T08:45:10Z
Modified
2026-08-22T03:31:16Z
Severity
  • 2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
OpenBoxes Product Supplier Edit Controller RoleInterceptor.groovy improper authorization
Details

A weakness has been identified in OpenBoxes up to 0.9.2. This vulnerability affects unknown code of the file grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy of the component Product Supplier Edit Controller. Executing a manipulation can lead to improper authorization. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.9.3 is able to resolve this issue. This patch is called f767ac1a5987d4865d9f158c6a967680f8e45468. It is suggested to upgrade the affected component.

Database specific 
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-266",
        "CWE-285"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/14xxx/CVE-2024-14045.json"
}
References

Affected packages

Git / github.com/openboxes/openboxes

Affected ranges

Type
GIT
Repo
https://github.com/openboxes/openboxes
Events
Introduced
3d5262462754d5b7709f217c7a92f5264eef1caf
Fixed
f767ac1a5987d4865d9f158c6a967680f8e45468
Fixed
94befadca24ab49fa81f056ca13a3bca4e7cc463
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0.9.0"
        },
        {
            "last_affected": "0.9.0"
        },
        {
            "introduced": "0.9.1"
        },
        {
            "last_affected": "0.9.1"
        },
        {
            "introduced": "0.9.2"
        },
        {
            "last_affected": "0.9.2"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

0.*
0.9.0
0.9.1
0.9.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-14045.json"