CVE-2024-12663

Summary

A vulnerability classified as problematic was found in funnyzpc Mee-Admin up to 1.6. This vulnerability affects unknown code of the file /mee/login of the component Login. The manipulation of the argument username leads to observable response discrepancy. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.

Affected Software

VendorProductVersion RangeStatus
funnyzpcMee-Admin1.0affected
funnyzpcMee-Admin1.1affected
funnyzpcMee-Admin1.2affected
funnyzpcMee-Admin1.3affected
funnyzpcMee-Admin1.4affected
funnyzpcMee-Admin1.5affected
funnyzpcMee-Admin1.6affected

Weaknesses

  • CWE-204: Observable Response Discrepancy
  • CWE-203: Information Exposure Through Discrepancy

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: no
    • Technical Impact: partial

Additional References

References