CVE-2024-35539

Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function

Medium · published August 19, 2024

CVSS v3.1
6.5
EPSS
1%
Percentile
73.1
In the wild
Unconfirmed
What it is

Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function. This vulnerability allows attackers to post several comments before the spam protection checks if the comments are posted too frequently.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01445 · 73.1th percentile
Published
2024-08-19T00:00Z
EPSS history
Timeline
  • 19 AUG 00:00Z
    Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function
    cvelistv5