CVE-2024-13200
CVSS 2.0 Score 7.5 of 10 (high)
Details
Published Jan 9, 2025
CWE ID 284
CWE ID 266
Summary
CVE-2024-13200 is a critical vulnerability affecting wander-chu SpringBoot-Blog 1.0. The issue lies in the preHandle function of BaseInterceptor.java, which handles HTTP POST requests. This manipulation results in improper access controls, allowing remote attackers to gain unauthorized access. The exploit has been made public, increasing the risk of potential attacks. Despite early disclosure to the vendor, there has been no response from them regarding this issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Springboot-Blog