CVE-2024-35539

Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function. This vulnerability allows attackers to post several comments before the spam protection checks if the comments are posted too frequently.

CVSS v3.1 CNA

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

EPSS

1.44% chance of exploitation in the next 30 days, 73rd percentile

Published

2024-08-19

Updated

2024-08-21

Proof-of-concept exploits (1)

• https://cyberaz0r.info/2024/08/typecho-multiple-vulnerabilities/

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/52161

Security advisories

• https://cyberaz0r.info/2024/08/typecho-multiple-vulnerabilities
• https://typecho.org

References

• CVE Record
• NVD entry