CVE-2024-1144mediumCWE-284

CVE-2024-1144: medium-severity vulnerability in Devklan Alma Blog

Improper Access Control at Alma Devklan Blog

Published · Updated

Follow this CVE+ Monitor Alma Blog

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.3%
Improper access control vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow an unauthenticated user to access the application's functionalities without the need for credentials.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected products
Devklan · Alma Blog
Related CVEs — Devklan Alma Blog

In the same product, most dangerous first.

CVE-2024-1145MEDIUMObservable Response Discrepancy at Alma Devklan BlogEPSS 0.5%CVE-2024-1146MEDIUMCross-site Scripting at Alma Devklan BlogEPSS 0.3%