PT-2025-2047 · Unknown · Zerowdd Myblog

Lvzc1 + 1 · CVE-2024-13189 · Published 2025-01-08 · Updated 2025-01-09

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ZeroWdd myblog version 1.0

Description A critical vulnerability has been found in ZeroWdd myblog, affecting an unknown part of the file src/main/java/com/wdd/myblog/config/MyBlogMvcConfig.java. This issue leads to permission problems and can be exploited remotely. The exploit has been publicly disclosed.

Recommendations For ZeroWdd myblog version 1.0, consider restricting access to the affected configuration file src/main/java/com/wdd/myblog/config/MyBlogMvcConfig.java as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

CWE-275

Related Identifiers

CVE-2024-13189

Affected Products

Zerowdd Myblog

References · 10

• 🔥 https://github.com/ZeroWdd/myblog/issues/1 · Exploit
• 🔥 https://github.com/ZeroWdd/myblog/issues/1#issue-2759828006 · Exploit
• https://osv.dev/vulnerability/CVE-2024-13189 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-13189 · Security Note
• https://vuldb.com/?id.290781 · Note
• https://t.me/cvedetector/14732 · Telegram Post
• https://vuldb.com/?ctiid.290781 · Note
• https://twitter.com/CVEnew/status/1877090756831158631 · Twitter Post
• https://vuldb.com/?submit.469223 · Note
• https://twitter.com/VulmonFeeds/status/1877154161441083682 · Twitter Post