CVE-2024-2412mediumCWE-1220

CVE-2024-2412: medium-severity vulnerability in Heimavista Rpage

Heimavista Rpage and Epage - Broken Access Control

Published · Updated

Follow this CVE+ Monitor Rpage+ Monitor Epage

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.4%
The disabling function of the user registration page for Heimavista Rpage and Epage is not properly implemented, allowing remote attackers to complete user registration on sites where user registration is supposed to be disabled.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Heimavista · EpageHeimavista · Rpage