CVE-2024-8297
Last modified
CVE-2024-8297 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. EPSS estimates a 0.53% chance of exploitation in the next 30 days.
Description
A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwt_refresh_token_middleware.go. The manipulation of the argument Authorization leads to improper output neutralization for logs. It is possible to launch the attack remotely. The name of the patch is 81b3336b4c9240f0bf50c13cb8375cf860d945f1. It is recommended to apply a patch to fix this issue.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Kitsada8621 | Digital Library Management System | 1.0 |
References
- https://github.com/kitsada8621/Digital-Library-Management-System/issues/1Issue Tracking, Product
- https://vuldb.com/?ctiid.276072Permissions Required, VDB Entry
- https://vuldb.com/?id.276072Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.394613Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-8297?
How severe is CVE-2024-8297?
How do I fix CVE-2024-8297?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-8290The WCFM – Frontend Manager for WooCommerce along with Booki…8.8
- CVE-2024-8291Concrete CMS versions 9.0.0 to 9.3.3 and below 8.5.19 are vu…4.8
- CVE-2024-8292The WP-Recall – Registration, Profile, Commerce & More plugi…9.8
- CVE-2024-8294A vulnerability, which was classified as critical, was found…9.8
- CVE-2024-8295A vulnerability has been found in FeehiCMS up to 2.1.1 and c…9.8
- CVE-2024-8296A vulnerability was found in FeehiCMS up to 2.1.1 and classi…9.8
- CVE-2024-8298Memory request vulnerability in the memory management module…5.5
- CVE-2024-8299Uncontrolled Search Path Element vulnerability in Mitsubishi…7.8
- CVE-2024-8300Dead Code vulnerability in Mitsubishi Electric GENESIS64 Ver…7
- CVE-2024-8301A vulnerability was found in dingfanzu CMS up to 29d67d9044f…9.8
- CVE-2024-8302A vulnerability was found in dingfanzu CMS up to 29d67d9044f…9.8
- CVE-2024-8303A vulnerability classified as critical has been found in din…6.3
Are you affected by CVE-2024-8297?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST