VULNERABILITY INTELLIGENCE

CVE-2024-24554

CVSS score8.2 HIGH
EPSS probability0.24%
CISA KEVNot currently listed
Published2024-06-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Description

Bludit uses predictable methods in combination with the MD5 hashing algorithm to generate sensitive tokens such as the API token and the user token. This allows attackers to authenticate against the Bludit API.

Weakness classification

  • vulnerability@ncsc.ch: CWE-287

Primary references