CVE-2024-0356

HIGH 7.5CVE-2024-0356 · Published 10/01/2024 · updated 17/06/2026

In short

CVE-2024-0356 is a HIGH (CVSS 7.5) vulnerability affecting ssm shiro blog (mandelo).
Chance of exploitation in the next 30 days (EPSS): 0.65%, higher than 51.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ssm shiro blog mandelo	`= 1.0`	No fix yet

Description

A vulnerability has been found in Mandelo ssm_shiro_blog 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file updateRoles of the component Backend. The manipulation leads to improper access controls. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250123.

References

medium.com/@heishou/ssm-has-a-vertical-override-vulnerability-8728da71842e · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free