CVE-2024-1345

MEDIUM 5.5CVE-2024-1345 · Published 19/02/2024 · updated 17/06/2026

In short

CVE-2024-1345 is a MEDIUM (CVSS 5.5) vulnerability affecting laborofficefree (laborofficefree).
Chance of exploitation in the next 30 days (EPSS): 0.15%, higher than 4.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
laborofficefree laborofficefree	`= 19.10`	No fix yet

Description

Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to perform a brute force attack and easily discover the root password.

References

incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-laborofficefree · Third Party Advisory

More vulnerabilities in laborofficefree

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free