CVE-2024-5203

Rejected reason: After careful review of CVE-2024-5203, it has been determined that the issue is not exploitable in real-world scenarios. Moreover, the exploit assumes that the attacker has access to a session code parameter that matches a cookie on the Keycloak server. However the attacker does not have access to the cookie, and can therefore not craft a malicious request.

Published

Jun 12, 2024

Last Modified

Sep 13, 2024

Status

Rejected

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-52023Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0…5.7
• CVE-2024-52024Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0…5.7
• CVE-2024-52025Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0…5.7
• CVE-2024-52026Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0…5.7
• CVE-2024-52028Netgear R7000P v1.3.3.154 was discovered to contain a stack …5.7
• CVE-2024-52029Netgear R7000P v1.3.3.154 was discovered to contain a stack …5.7
• CVE-2024-52030Netgear R7000P v1.3.3.154 was discovered to contain a stack …5.7
• CVE-2024-52032Mattermost versions 10.0.x <= 10.0.0 and 9.11.x <= 9.11.2 fa…4.3
• CVE-2024-52033Exposure of sensitive system information to an unauthorized …5.3
• CVE-2024-52034An OS Command Injection vulnerability exists within myPRO Ma…10
• CVE-2024-52035An integer overflow vulnerability exists in the OLE Document…7.8
• CVE-2024-5204The Swiss Toolkit For WP plugin for WordPress is vulnerable …8.8