← volver
CVE-2024-12663

funnyzpc Mee-Admin Login login observable response discrepancy

CVSS 6.3 MEDIUMEPSS 0.4%CWE-203CWE-204
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 6.3EPSS 0.4%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
16 dic 2024Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A vulnerability classified as problematic was found in funnyzpc Mee-Admin up to 1.6. This vulnerability affects unknown code of the file /mee/login of the component Login. The manipulation of the argument username leads to observable response discrepancy. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
funnyzpc · Mee-Admin

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →