CVE-2024-51037

MediumCVSS 5.3

Published: 15/11/2024(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

19th percentile - higher than 19% of all known CVEs

Summary

A vulnerability in kodbox version 1.52.04 and earlier allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function.

Risk Assessment

An attacker can exploit this flaw to intercept credentials or other confidential data, potentially leading to unauthorized system access.

Recommendation

Immediately update kodbox to a version later than 1.52.04 where this vulnerability is fixed.

Original NVD description (English source)

An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function.