CVE-2024-51037 Information disclosure in n/a

What is CVE-2024-51037?

CVE-2024-51037 is a medium-severity vulnerability in n/a, published on 15 Nov 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function.

Weakness: CWE-346

Which versions are affected by CVE-2024-51037?

It affects 1 product.

Products include Kodcloud Kodbox.

How do I fix CVE-2024-51037?

No fix has been published for CVE-2024-51037 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-51037 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-51037 exists.

Other vulnerabilities in n/a

• CVE-2023-39691 Missing authorization in n/a Critical 9.8
• CVE-2023-48028 Information disclosure in n/a Critical 9.8
• CVE-2023-29790 Information disclosure in n/a High 7.5
• CVE-2023-6848 kalcaddle kodbox index.class.php check command injection High 7.3
• CVE-2023-6849 kalcaddle kodbox app.php cover server-side request forgery High 7.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-wx4c-59w2-pw86.