CVE-2024-13136: falha de média gravidade em wangl1989 mysiteforme
wangl1989 mysiteforme ShiroConfig.java rememberMeManager deserialization
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.6%
A vulnerability was found in wangl1989 mysiteforme 1.0 and classified as critical. Affected by this issue is the function rememberMeManager of the file src/main/java/com/mysiteforme/admin/config/ShiroConfig.java. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
wangl1989 · mysiteformeCVEs relacionadas — wangl1989 mysiteforme
No mesmo produto, das mais perigosas para as menos.
CVE-2024-13139MEDIUMwangl1989 mysiteforme FileController doContent server-side request forgeryEPSS 0.6%CVE-2024-13138MEDIUMwangl1989 mysiteforme LocalUploadServiceImpl upload unrestricted uploadEPSS 0.5%CVE-2024-13137MEDIUMwangl1989 mysiteforme SiteController RestResponse cross site scriptingEPSS 0.3%