CVE-2024-50488
Authentication Bypass Using an Alternate Path or Channel (CWE-288)
Published: Oct 28, 2024 / Updated: 22d ago
010
CVSS 8.8EPSS 0.04%High
CVE info copied to clipboard
Authentication Bypass Using an Alternate Path or Channel vulnerability in Priyabrata Sarkar Token Login allows Authentication Bypass.This issue affects Token Login: from n/a through 1.0.3.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Timeline
CVE Assignment
NVD published the first details for CVE-2024-50488
Oct 28, 2024 at 1:15 PM
First Article
Feedly found the first article mentioning CVE-2024-50488. See article
Oct 28, 2024 at 1:24 PM / National Vulnerability Database
CVSS Estimate
Feedly estimated the CVSS score as HIGH
Oct 28, 2024 at 1:24 PM
EPSS
EPSS Score was set to: 0.04% (Percentile: 9.9%)
Oct 29, 2024 at 9:43 AM
Affected Systems
Priyabratasarkar/token_login
+null more
Links to Mitre Att&cks
T1083: File and Directory Discovery
+null more
Attack Patterns
CAPEC-127: Directory Indexing
+null more
News
RandomRobbieBF/CVE-2024-50488
Change the url to the wordpress site your logged in on. This is due to the plugin not properly verifying if a user has permissions to generate a login token for other users.
Wordfence Intelligence Weekly WordPress Vulnerability Report (October 21, 2024 to October 27, 2024)
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week: WordPress Plugins with Reported Vulnerabilities Last Week
Security Bulletin 30 Oct 2024 - Cyber Security Agency of Singapore
A vulnerability in the SSH subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to execute ...
CVE-2024-50488
High Severity Description Authentication Bypass Using an Alternate Path or Channel vulnerability in Priyabrata Sarkar Token Login allows Authentication Bypass.This issue affects Token Login: from n/a through 1.0.3. Read more at https://www.tenable.com/cve/CVE-2024-50488
NA - CVE-2024-50488 - Authentication Bypass Using an Alternate Path...
Authentication Bypass Using an Alternate Path or Channel vulnerability in Priyabrata Sarkar Token Login allows Authentication Bypass.This issue affects Token Login: from n/a through 1.0.3.
See 6 more articles and social media posts