CVE-2024-25170

CVE-2024-25170 is a critical access control bypass vulnerability affecting Mezzanine v6.0.0, allowing attackers to manipulate the Host header to gain unauthorized access. With a CVSS score of 9.1, this network-exploitable flaw requires no user interaction or privileges, posing a high risk of complete confidentiality and integrity compromise. While there are no known public exploits or active exploitation, the vulnerability has garnered significant community discussion, indicating potential future interest from threat actors.