Observable Response Discrepancy in langhsu Mblog Blog System by langhsu
CVE-2024-13198
Key Information:
- Vendor
- Langhsu
- Status
- Mblog Blog System
- Vendor
- CVE Published:
- 9 January 2025
Badges
Summary
A vulnerability has been identified within the langhsu Mblog Blog System version 3.5.0, specifically impacting the login functionality. This vulnerability allows attackers to exploit an observable response discrepancy, providing them the potential to execute remote attacks. The complexity of the attack is deemed high, and though public disclosure has occurred, the vendor has yet to respond to indications of the threat. Given the intricate nature of this vulnerability, prompt assessment and mitigative measures are recommended for users of the affected version.
Affected Version(s)
Mblog Blog System 3.5.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Timeline
- π‘
Public PoC available
- πΎ
Exploit known to exist
Vulnerability published
Vulnerability Reserved