一、 漏洞 CVE-2024-44000 基础信息
漏洞标题
漏洞描述信息
CVSS信息
漏洞类别
漏洞标题
漏洞描述信息
CVSS信息
漏洞类别
漏洞标题
漏洞描述信息
CVSS信息
漏洞类别
二、漏洞 CVE-2024-44000 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | CVE-2024-44000 is a vulnerability in the LiteSpeed Cache plugin, a popular WordPress plugin. This vulnerability affects session management in LiteSpeed Cache, allowing attackers to gain unauthorized access to sensitive data. | https://github.com/absholi7ly/CVE-2024-44000-LiteSpeed-Cache | POC详情 |
| 2 | LiteSpeed Unauthorized Account Takeover | https://github.com/gbrsh/CVE-2024-44000 | POC详情 |
| 3 | CVE-2024-44000-LiteSpeed-Cache | https://github.com/ifqygazhar/CVE-2024-44000-LiteSpeed-Cache | POC详情 |
| 4 | is a PoC tool designed to exploit insecurely exposed debug logs from WordPress sites and extract session cookies | https://github.com/geniuszlyy/CVE-2024-44000 | POC详情 |
| 5 | CVE-2024-44000 | https://github.com/zgimszhd61/CVE-2024-44000 | POC详情 |
| 6 | is a PoC tool designed to exploit insecurely exposed debug logs from WordPress sites and extract session cookies | https://github.com/geniuszly/CVE-2024-44000 | POC详情 |
三、漏洞 CVE-2024-44000 的情报信息
-
标题： WordPress LiteSpeed Cache plugin < 6.5.0.1 - Unauthenticated Account Takeover via Cookie Leak vulnerability - Patchstack -- 🔗来源链接
标签： vdb-entry
神龙速读
-
标题： Critical Account Takeover in LiteSpeed Cache Plugin - Patchstack -- 🔗来源链接
标签： third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-44000