CVE Daily

CVE-2024-43234

Authentication Bypass Using an Alternate Path or Channel vulnerability in Woffic...

Critical CVSS 9.8

Overview

Authentication Bypass Using an Alternate Path or Channel vulnerability in WofficeIO Woffice allows Authentication Bypass.This issue affects Woffice: from n/a through 5.4.14.

CWE: CWE-288 Published: 2024-12-16T16:15:07.037
Risk analysis

This vulnerability is rated 🔴 CRITICAL.

  • CVSS: 9.8 (CRITICAL)
  • Detected tags: unauth_access (tag impact: HIGH)

Recommended actions:

  • Enforce authentication/authorization; reduce default endpoint exposure.

Recommended tools

Tags