CVE-2024-1346

5.5 mediumEPSS 0.4%

Medium (5.5) in laborofficefree laborofficefree. EPSS 0.4% chance of exploitation in the next 30 days.

Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWE: CWE-521
Published: 2024-02-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

laborofficefree:laborofficefree

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-laborofficefree
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-laborofficefree

Check your stack JSON