CVE-2024-10141

Katalog CVE

CVSS 8.1 · High EPSS 0,81%

Kerentanan Predictable from Observable State pada jsbroks coco annotator. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability, which was classified as problematic, was found in jsbroks COCO Annotator 0.11.1. This affects an unknown part of the component Session Handler. The manipulation of the argument SECRET_KEY leads to predictable from observable state. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.

Rincian

Terbit di NVD

19 Oktober 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-341: Predictable from Observable State

EPSS (30 hari)

0,81% peluang dieksploitasi; lebih tinggi dari 55,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/jsbroks/coco-annotator/issues/626 exploit · issue tracking · advisory pihak ketiga
• https://github.com/jsbroks/coco-annotator/issues/626#issue-2582440109 exploit · advisory pihak ketiga
• https://vuldb.com/?ctiid.280929 permissions required · advisory pihak ketiga · vdb entry
• https://vuldb.com/?id.280929 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.422713 advisory pihak ketiga · vdb entry