Lucene search

K

MitreCVELIST:CVE-2024-29401

HistoryMar 26, 2024 - 12:00 a.m.

CVE-2024-29401

2024-03-2600:00:00

mitre

www.cve.org

1

vulnerable

insufficient session expiration

attackers

deleted admin

AI Score

6.7

Confidence

High

EPSS

0

Percentile

9.0%

xzs-mysql 3.8 is vulnerable to Insufficient Session Expiration, which allows attackers to use the session of a deleted admin to do anything.

References

github.com/menghaining/PoC/blob/main/xzs-mysql/xzs-mysql%20--%20PoC.md

AI Score

6.7

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVELIST:CVE-2024-29401

nvd1 vulnrichment1 cve1