PT-2024-16396 · Tongda Oa · Tongda Oa

Lvzc1 · Published 2024-10-31 · Updated 2024-11-04 · CVE-2024-10599

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Tongda OA 2017 up to 11.7

Description A problematic issue has been found in Tongda OA, affecting some unknown processing of the file /inc/package static resources.php. This leads to resource consumption and can be initiated remotely. The issue has been disclosed to the public.

Recommendations For Tongda OA 2017 up to 11.7, update to the latest version to mitigate risks. As a temporary workaround, consider restricting access to the file /inc/package static resources.php until a patch is available.

Exploit

Fix

Resource Exhaustion

Allocation of Resources Without Limits

Weakness Enumeration

CWE-400

CWE-770

Related Identifiers

CVE-2024-10599

Affected Products

Tongda Oa

References · 13

• 🔥 https://github.com/LvZCh/td/issues/2 · Exploit
• https://osv.dev/vulnerability/CVE-2024-10599 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-10599 · Security Note
• https://twitter.com/CVEnew/status/1852104126265696657 · Twitter Post
• https://vuldb.com/?ctiid.282611 · Note
• https://twitter.com/transilienceai/status/1853300766351786200 · Twitter Post
• https://t.me/cvenotify/100571 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1852173071274152100 · Twitter Post
• https://t.me/cvedetector/9543 · Telegram Post
• https://twitter.com/transilienceai/status/1853300773414961582 · Twitter Post
• https://vuldb.com/?submit.433496 · Note
• https://t.me/cvenotify/100235 · Telegram Post
• https://vuldb.com/?id.282611 · Note