CVE-2024-0413

A vulnerability was found in DeShang DSKMS up to 3.1.2. It has been rated as problematic. This issue affects some unknown processing of the file public/install.php. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250433 was assigned to this vulnerability.

• CWE-284

• https://note.zhaoj.in/share/MarH4fY66BgOBroken Link
• https://vuldb.com/?ctiid.250433Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.250433Permissions Required, Third Party Advisory, VDB Entry
• https://note.zhaoj.in/share/MarH4fY66BgOBroken Link
• https://vuldb.com/?ctiid.250433Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.250433Permissions Required, Third Party Advisory, VDB Entry

Published

Jan 11, 2024

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-0407Certain HP Enterprise LaserJet, and HP LaserJet Managed Prin…6.5
• CVE-2024-0408A flaw was found in the X.Org server. The GLX PBuffer code d…5.5
• CVE-2024-0409A flaw was found in the X.Org server. The cursor code in bot…7.8
• CVE-2024-0410An authorization bypass vulnerability was discovered in GitL…7.7
• CVE-2024-0411A vulnerability was found in DeShang DSMall up to 6.1.0. It …7.5
• CVE-2024-0412A vulnerability was found in DeShang DSShop up to 3.1.0. It …9.8
• CVE-2024-0414A vulnerability classified as problematic has been found in …9.8
• CVE-2024-0415A vulnerability classified as critical was found in DeShang …9.8
• CVE-2024-0416A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-0417A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-0418A vulnerability has been found in iSharer and upRedSun File …7.5
• CVE-2024-0419A vulnerability was found in Jasper httpdx up to 1.5.4 and c…7.5