CVE-2024-4428

6.9 mediumEPSS 0.5%

Medium (6.9) in menulux managment portal. EPSS 0.5% chance of exploitation in the next 30 days.

Missing Authentication for Critical Function, Missing Authorization vulnerability in Menulux Information Technologies Managment Portal allows Collect Data as Provided by Users. This issue affects Managment Portal: through 21.05.2024.

Severity

CVSS 4.0

6.9 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:L

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWEs: CWE-306, CWE-862
Published: 2024-08-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

menulux:managment_portal

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1356
https://www.usom.gov.tr/bildirim/tr-24-1356

Check your stack JSON