CVE-2024-1144CWE-284
Improper Access Control at Alma Devklan Blog
Medium · published March 19, 2024
What it is
Improper access control vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow an unauthenticated user to access the application's functionalities without the need for credentials.
The record
Technical detail
- CVSS v3.1
- 6.5 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00333 · 25.3th percentile
- Weakness
- CWE-284 · Improper Access Control
- Published
- 2024-03-19T11:32Z
EPSS history
Timeline