CVE-2024-13189 MEDIUM

CVE-2024-13189: ZeroWdd myblog MyBlogMvcConfig.java permission

Vendor Zerowdd

Product myblog

Weakness CWE-275

Published January 8, 2025

Last update January 8, 2025

View on NVD All CVEs

CVSS base score

6.9/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

Description

A vulnerability classified as critical has been found in ZeroWdd myblog 1.0. This affects an unknown part of the file src/main/java/com/wdd/myblog/config/MyBlogMvcConfig.java. The manipulation leads to permission issues. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Key dates

Disclosure timeline

January 8, 2025 CVE published

January 8, 2025 Record updated