CVE-2024-50644

CRITICAL

zhisheng17 blog 3.0.1-SNAPSHOT - Auth Bypass

Title source: llm

Description

zhisheng17 blog 3.0.1-SNAPSHOT has an authentication bypass vulnerability. An attacker can exploit this vulnerability to access API without any token.

Exploits (1)

gitee WRITEUP 1 stars

by fushuling · poc

https://gitee.com/fushuling/cve/blob/master/CVE-2024-50644.md

View Code ZIP pw:eip

References (3)

[Various Sources] https://gitee.com/fushuling/cve/blob/master/CVE-2024-50644.md

[Various Sources] https://github.com/zhisheng17/blog

View Writeup ZIP pw:eip

[Issue Tracking] https://github.com/zhisheng17/blog/issues/64

Scores

CVSS v3 9.8

EPSS 0.0009

EPSS Percentile 25.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-287

Status published

Published Aug 22, 2025

Tracked Since Feb 18, 2026