exploitDog

CVE-2024-44821

Опубликовано: 04 сент. 2024

Источник: nvd

CVSS3: 5.3

EPSS Низкий

Описание

ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha response, allowing them to capture the correct captcha value through error messages.

Ссылки

https://github.com/gkdgkd123/codeAudit/blob/main/CVE-2024-44821%20ZZCMS2023%20%E9%AA%8C%E8%AF%81%E7%A0%81%E5%A4%8D%E7%94%A8%E9%80%BB%E8%BE%91%E6%BC%8F%E6%B4%9E.md
Broken Link
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:zzcms:zzcms:*:*:*:*:*:*:*:*

Версия до 2023 (включая)

EPSS

Процентиль: 38%

0.00162

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-287

Связанные уязвимости

GHSA-6g49-7hrc-9j92

CVSS3: 5.3

github

больше 1 года назад

ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha response, allowing them to capture the correct captcha value through error messages.

EPSS

Процентиль: 38%

0.00162

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-287