CVE-2024-57603

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the lack of rate limiting.

CVSS v3.1

6.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CVSS v3.1

6.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS

0.44% chance of exploitation in the next 30 days, 37th percentile

Published

2025-02-12

Updated

2025-02-13

Proof-of-concept exploits (2)

• mayswind/ezbookkeeping/issues/33
• https://hkohi.ca/vulnerability/1

References

• CVE Record
• NVD entry

Related

• CVE-2024-57604
• CVE-2024-57602
• CVE-2024-57601
• CVE-2024-57605
• CVE-2024-57582
• CVE-2024-57606