CyberRota Analysis
AI-GeneratedThe emergency recovery approval component in Ente Technologies Ente Museum Server is vulnerable to an authorization bypass, allowing authenticated attackers designated as a victim's emergency contact to circumvent the recovery waiting period. This flaw enables them to execute a crafted `approve-recovery` API request, potentially leading to account takeover. Organizations using this server should prioritize patching this vulnerability to protect user accounts from unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted `approve-recovery` API request.