CVE-2024-50477
CRITICAL NUCLEIStacks Mobile App Builder <= 5.2.3 - Authentication Bypass
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2024-50477. PoCs published by stealthcopter, RandomRobbieBF. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates an authentication bypass vulnerability in Stacks Mobile App Builder by manipulating query parameters to impersonate a user (typically the administrator). The attack involves appending specific parameters to the URL to gain unauthorized access to the admin dashboard.
Description
Authentication Bypass Using an Alternate Path or Channel vulnerability in Stacks Stacks Mobile App Builder stacks-mobile-app-builder allows Authentication Bypass.This issue affects Stacks Mobile App Builder: from n/a through <= 5.2.3.
Exploits (2)
This exploit demonstrates an authentication bypass vulnerability in Stacks Mobile App Builder by manipulating query parameters to impersonate a user (typically the administrator). The attack involves appending specific parameters to the URL to gain unauthorized access to the admin dashboard.
This PoC demonstrates an authentication bypass vulnerability in Stacks Mobile App Builder <= 5.2.3. By manipulating the `uid` parameter in a crafted URL, an unauthenticated attacker can log in as any user, including administrators.
Nuclei Templates (1)
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H