CVE-2024-12663

LOW

Mee-Admin <1.6 - Info Disclosure

Title source: llm
STIX 2.1

Description

A vulnerability classified as problematic was found in funnyzpc Mee-Admin up to 1.6. This vulnerability affects unknown code of the file /mee/login of the component Login. The manipulation of the argument username leads to observable response discrepancy. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.

Scores

CVSS v3 3.7
EPSS 0.0021
EPSS Percentile 42.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-203 CWE-204
Status published
Products (7)
funnyzpc/Mee-Admin 1.0
funnyzpc/Mee-Admin 1.1
funnyzpc/Mee-Admin 1.2
funnyzpc/Mee-Admin 1.3
funnyzpc/Mee-Admin 1.4
funnyzpc/Mee-Admin 1.5
funnyzpc/Mee-Admin 1.6
Published Dec 16, 2024
Tracked Since Feb 18, 2026