CVE-2024-10620: knightliao Disconf Configuration Center list improper authentication

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-11-01 · updated 2026-06-17
Weakness: CWE-287

Description

A vulnerability was found in knightliao Disconf 2.6.36. It has been classified as critical. This affects an unknown part of the file /api/config/list of the component Configuration Center. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

knightliao Disconf: 2.6.36

References

https://github.com/knightliao/disconf/issues/431
https://github.com/knightliao/disconf/issues/431#issue-2607011340
https://vuldb.com/?ctiid.282633
https://vuldb.com/?id.282633
https://vuldb.com/?submit.429927

Get alerted when CVE-2024-10620 or the next vulnerability affects your stack