CVE-2024-35539
MEDIUMTypecho 1.3.0 - Race Condition in Post Commenting Function
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2024-35539. PoCs published by cyberaz0r.
AI-analyzed exploit summary This exploit targets a race condition in Typecho 1.3.0 by spamming comment requests to trigger the vulnerability. It calculates a form token via JavaScript execution and uses concurrent HTTP requests to flood the target.
Description
Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function. This vulnerability allows attackers to post several comments before the spam protection checks if the comments are posted too frequently.
Exploits (2)
This exploit targets a race condition in Typecho 1.3.0 by spamming comment requests to trigger the vulnerability. It calculates a form token via JavaScript execution and uses concurrent HTTP requests to flood the target.
The repository contains functional exploit code for CVE-2024-35539, a race condition vulnerability in Typecho <= 1.3.0. The exploit demonstrates the vulnerability by spamming comments to trigger the race condition, leveraging JavaScript token calculation and concurrent HTTP requests.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L