CVE-2024-12142
Last modified
CVE-2024-12142 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure of restricted web page, modification of web page and denial of service when specific web pages are modified and restricted functions are invoked.. EPSS estimates a 0.33% chance of exploitation in the next 30 days.
Description
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure of restricted web page, modification of web page and denial of service when specific web pages are modified and restricted functions are invoked.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-12142?
How severe is CVE-2024-12142?
How do I fix CVE-2024-12142?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-12133A flaw in libtasn1 causes inefficient handling of specific c…5.3
- CVE-2024-12136Missing Critical Step in Authentication vulnerability in Elf…7.8
- CVE-2024-12137Authentication Bypass by Capture-replay vulnerability in Elf…7.6
- CVE-2024-12138A vulnerability classified as critical was found in horilla …8.8
- CVE-2024-1214The Easy Social Feed – Social Photos Gallery – Post Feed – L…4.3
- CVE-2024-12140The Elementor Addons AI Addons – 70 Widgets, Premium Templat…4.3
- CVE-2024-12143Improper Neutralization of Special Elements used in an SQL C…9.8
- CVE-2024-12144Improper Neutralization of Special Elements used in an SQL C…9.8
- CVE-2024-12146Improper Neutralization of Special Elements used in an SQL C…7.5
- CVE-2024-12147A vulnerability was found in Netgear R6900 1.0.1.26_1.0.20. …7.1
- CVE-2024-12148Incorrect authorization in permission validation component i…4.3
- CVE-2024-12149Incorrect permission assignment in temporary access requests…8.1
Are you affected by CVE-2024-12142?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST