CVE-2024-13028

A vulnerability, which was classified as problematic, has been found in Antabot White-Jotter up to 0.2.2. This issue affects some unknown processing of the file /login. The manipulation of the argument username leads to observable response discrepancy. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.

• CWE-203
• CWE-204

• https://github.com/cydtseng/Vulnerability-Research/blob/main/white-jotter/ObservableDiscrepancy-UserLogin.mdExploit, Mitigation, Third Party Advisory
• https://vuldb.com/?ctiid.289721Permissions Required, VDB Entry
• https://vuldb.com/?id.289721Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.465924Third Party Advisory, VDB Entry

Published

Dec 29, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-13021A vulnerability, which was classified as problematic, has be…5.4
• CVE-2024-13022A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-13023A vulnerability has been found in PHPGurukul Maid Hiring Man…6.1
• CVE-2024-13024A vulnerability was found in Codezips Blood Bank Management …9.8
• CVE-2024-13025A vulnerability was found in Codezips College Management Sys…8.8
• CVE-2024-13026A vulnerability exists in Algo Edge up to 2.1.1 - a previous…6.1
• CVE-2024-13029A vulnerability, which was classified as problematic, was fo…8.8
• CVE-2024-1303Incorrectly limiting the path to a restricted directory vuln…6.5
• CVE-2024-13030A vulnerability was found in D-Link DIR-823G 1.0.2B05_201812…9.8
• CVE-2024-13031A vulnerability classified as problematic has been found in …4.8
• CVE-2024-13032A vulnerability classified as problematic was found in Antab…4.9
• CVE-2024-13033A vulnerability, which was classified as problematic, has be…6.1