CVE-2024-12663: funnyzpc Mee-Admin Login login observable response discrepancy

Severity: low (CVSS 3.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-12-16 · updated 2026-06-17
Weakness: CWE-203

Description

A vulnerability classified as problematic was found in funnyzpc Mee-Admin up to 1.6. This vulnerability affects unknown code of the file /mee/login of the component Login. The manipulation of the argument username leads to observable response discrepancy. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.

Affected products

funnyzpc Mee-Admin: 1.0, 1.1, 1.2, 1.3, 1.4, 1.5 (+1)

References

https://github.com/funnyzpc/mee-admin/issues/9
https://vuldb.com/?ctiid.288532
https://vuldb.com/?id.288532
https://vuldb.com/?submit.458371
https://github.com/funnyzpc/mee-admin/issues/9

Get alerted when CVE-2024-12663 or the next vulnerability affects your stack