Medium severity6.5NVD Advisory· Published Jan 25, 2024· Updated Jun 17, 2026

CVE-2024-0879

Description

Authentication bypass in vector-admin allows a user to register to a vector-admin server while “domain restriction” is active, even when not owning an authorized email address.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mintplex Labs/Vector Admin3 versions
cpe:2.3:a:mintplexlabs:vector_admin:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:mintplexlabs:vector_admin:*:*:*:*:*:*:*:*range: <2024-01-23
- (no CPE)
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

github.com/Mintplex-Labs/vector-admin/pull/128/commits/a581b8177dd6be719a5ef6d3ce4b1e939636bb41nvdPatch
research.jfrog.com/vulnerabilities/vector-admin-filter-bypass/nvdPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000