Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-1145

Observable Response Discrepancy at Alma Devklan Blog

Description

User enumeration vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow a remote user to retrieve all valid users registered in the application just by looking at the request response.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Devklan Alma Blog

Default version status: unaffected

  • 0 to ≤ 2.1.10affected

References