CVE-2024-6056

Katalog CVE

CVSS 5.3 · Medium EPSS 0,65%

Kerentanan Observable Response Discrepancy pada nasirkhan laravel starter. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in nasirkhan Laravel Starter up to 11.8.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /forgot-password of the component Password Reset Handler. The manipulation of the argument Email leads to observable response discrepancy. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-268784. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Rincian

Terbit di NVD

17 Juni 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-204: Observable Response Discrepancy
CWE-203: Observable Discrepancy

EPSS (30 hari)

0,65% peluang dieksploitasi; lebih tinggi dari 49,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://powerful-bulb-c36.notion.site/idor-c6eb58e8fc40416ba53c7915ca0174c4?pvs=4 exploit · advisory pihak ketiga
• https://vuldb.com/?id.268784 advisory pihak ketiga
• https://vuldb.com/?submit.352978 advisory pihak ketiga
• https://vuldb.com/?ctiid.268784 permissions required