Observable Response Discrepancy in Antabot White-Jotter

CVE-2024-13028

What is CVE-2024-13028?

A potential issue has been identified in the Antabot White-Jotter application, specifically affecting versions up to 0.2.2. The vulnerability arises from an observable response discrepancy during the handling of the username parameter within the /login functionality. This manipulation can lead to information disclosure, providing attackers with further insights into the application behavior. While initiating an attack is feasible remotely, the complexity involved in successfully exploiting this vulnerability is significantly high, making it a challenging scenario for potential attackers. Awareness of this issue is critical for organizations utilizing the affected version of Antabot White-Jotter.

References