CVE-2024-13028 is a problematic vulnerability affecting Antabot White-Jotter up to version 0.2.2, specifically in the /login processing where manipulating the username argument causes an observable response discrepancy. The attack complexity is high, and exploitation is difficult, with a CVSS score of 3.7 (Low severity) indicating a potential impact of low confidentiality. While the exploit has been publicly disclosed, there is no evidence of active exploitation, and it lacks exploit intelligence in common frameworks like Metasploit or Nuclei, with minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 0.2.2CPE matchmatch criteria | cpe:2.3:a:antabot:white-jotter:*:*:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.3 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.