Lucene search
K

5 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 7:11 a.m.4 views

CVE-2024-57433

macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control via the logout function. After a user logs out, their token is still available and fetches information in the logged-in state...

7.5CVSS6.6AI score0.00405EPSS
Exploits1References1
OSV
OSV
added 2025/01/31 10:15 p.m.2 views

CVE-2024-57433

macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control via the logout function. After a user logs out, their token is still available and fetches information in the logged-in state...

7.5CVSS5.8AI score0.00405EPSS
Exploits1References1
NVD
NVD
added 2025/01/31 10:15 p.m.26 views

CVE-2024-57433

macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control via the logout function. After a user logs out, their token is still available and fetches information in the logged-in state...

7.5CVSS0.00405EPSS
Exploits1References1
CVE
CVE
added 2025/01/31 12:0 a.m.77 views

CVE-2024-57433

CVE-2024-57433 affects macrozheng mall-tiny 1.0.1. The vulnerability is described as Incorrect Access Control via the logout function: after logout, the user’s token remains available and can be used to fetch information in the logged-in state. This is supported by multiple feeds in connected doc...

7.5CVSS6.3AI score0.00405EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/31 12:0 a.m.9 views

CVE-2024-57433

macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control via the logout function. After a user logs out, their token is still available and fetches information in the logged-in state...

6.3AI score0.00405EPSS
Exploits1References1
Rows per page
Query Builder