← Back

CVE-2024-1144

nvd nist
Published: Mar 19, 2024Modified: Oct 15, 2025

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Exploitability: 3.9 / Impact: 2.5
Source: cve-coordination@incibe.es (Secondary)

Description

Improper access control vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow an unauthenticated user to access the application's functionalities without the need for credentials.

Affected (1)

Products: Alma: Alma Blog
Alma
1 product
Alma Blog
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Alma Blog
Up to 2.1.10

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

Source: cve-coordination@incibe.es
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.