Lucene search
HistoryMar 19, 2024 - 12:15 p.m.
CVE-2024-1145
devklan
alma blog
user enumeration
vulnerability
cve-2024-1145
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
5.2
Confidence
High
EPSS
0
Percentile
9.0%
User enumeration vulnerability in Devklan’s Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow a remote user to retrieve all valid users registered in the application just by looking at the request response.
Related
cvelist
cvelist
CVE-2024-1145 Observable Response Discrepancy at Alma Devklan Blog
2024-03-19 11:35:46
vulnrichment
vulnrichment
CVE-2024-1145 Observable Response Discrepancy at Alma Devklan Blog
2024-03-19 11:35:46
cve
cve
CVE-2024-1145
2024-03-19 12:15:08
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
5.2
Confidence
High
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-1145