PT-2024-17554 · Unknown · Inw Krbyyyzo

Inw Krbyyyzo · Published 2024-01-09 · Updated 2026-05-08 · CVE-2024-12345

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:L/AC:L/Au:M/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: INW Krbyyyzo version 25.2002

Description: A problematic issue was found in the Daily Huddle Site component, specifically in the file /gbo.aspx. The manipulation of the argument s leads to resource consumption. It is possible to launch the attack on the local host, and other endpoints might be affected as well.

Recommendations: INW Krbyyyzo version 25.2002: Update the Daily Huddle Site component to prevent resource consumption by manipulating the s argument in the /gbo.aspx file.

Fix

RCE

LPE

Improper Resource Release

Resource Exhaustion

Weakness Enumeration

CWE-404

CWE-400

Related Identifiers

CVE-2024-12345

Affected Products

Inw Krbyyyzo

References · 37

• https://nvd.nist.gov/vuln/detail/CVE-2024-12345 · Security Note
• https://twitter.com/dailycve/status/2039119623916810502 · Twitter Post
• https://twitter.com/Cezar_H_Linux/status/1971694515968004421 · Twitter Post
• https://twitter.com/Cipher0ps_tech/status/1744643901141799088 · Twitter Post
• https://twitter.com/dailycve/status/2044964563351662806 · Twitter Post
• https://twitter.com/davidsheyi/status/2000551764106322160 · Twitter Post
• https://twitter.com/samehadatech/status/1905618772230045804 · Twitter Post
• https://t.me/cvenotify/108663 · Telegram Post
• https://twitter.com/wiseduckdev/status/1826625578134650965 · Twitter Post
• https://twitter.com/davidsheyi/status/2032065401681502222 · Twitter Post
• https://twitter.com/dailycve/status/2051792594842136625 · Twitter Post
• https://vuldb.com/?id.293509 · Note
• https://twitter.com/dailycve/status/2047726843218837895 · Twitter Post
• https://twitter.com/dailycve/status/2038972500961268031 · Twitter Post
• https://twitter.com/transilienceai/status/1834377291746492624 · Twitter Post