CVE-2024-3928

A vulnerability was found in Dromara open-capacity-platform 2.0.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /actuator/heapdump of the component auth-server. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-261367.

• CWE-200

• https://github.com/ggfzx/OCP-Security-Misconfiguration/tree/main
• https://vuldb.com/?ctiid.261367
• https://vuldb.com/?id.261367
• https://vuldb.com/?submit.313847
• https://github.com/ggfzx/OCP-Security-Misconfiguration/tree/main
• https://vuldb.com/?ctiid.261367
• https://vuldb.com/?id.261367
• https://vuldb.com/?submit.313847

Published

Apr 18, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-39274Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6, 9.7.x <=…6.5
• CVE-2024-39275Cookies of authenticated Advantech ADAM-5630 users remain as…8.8
• CVE-2024-39276In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-39277In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-39278Credentials to access device configuration information store…4.6
• CVE-2024-39279Insufficient granularity of access control in UEFI firmware …6.8
• CVE-2024-39280An external config control vulnerability exists in the nas.c…9.1
• CVE-2024-39281The command ctl_persistent_reserve_out allows the caller to …5.3
• CVE-2024-39282In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-39283Incomplete filtering of special elements in Intel(R) TDX mod…7.8
• CVE-2024-39284Uncontrolled search path for some Intel(R) Advisor software …6.7
• CVE-2024-39285Improper access control in UEFI firmware in some Intel(R) Se…5.6