cve/2024/CVE-2024-1144.md

18 lines
739 B
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2024-1144](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1144)
![](https://img.shields.io/static/v1?label=Product&message=Alma%20Blog&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%3D%202.1.10%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-284%20Improper%20Access%20Control&color=brighgreen)
### Description
Improper access control vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow an unauthenticated user to access the application's functionalities without the need for credentials.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/NaInSec/CVE-LIST