← Back

CVE-2024-24621

nvd nist
Published: Jul 25, 2024Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality. Remote, anonymous attackers can exploit this vulnerability to gain full server access as the root user.

Affected (1)

Products: Softaculous: Webuzo
Softaculous
1 product
Webuzo
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Webuzo
Before 4.2.9

Related CWEs

CWE-697
Incorrect Comparison
The product compares two entities in a security-relevant context, but the comparison is incorrect, which may lead to resultant weaknesses.

References (2)

Source: disclosures@exodusintel.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.