CVE-2024-55585

9.0 criticalEPSS 0.4%

Critical (9.0). EPSS 0.4% chance of exploitation in the next 30 days.

In the moPS App through 1.8.618, all users can access administrative API endpoints without additional authentication, resulting in unrestricted read and write access, as demonstrated by /api/v1/users/resetpassword.

Severity

CVSS 4.0

9.0 critical

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/AU:N/RE:M/U:Red

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2025-06-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://karatemuffin.it/data/2025_06_07_CVE-2024-55585_update.json
https://media.ccc.de/v/glt25-504-safety-ja-security-nein-analyse-eines-breit-eingesetzten-einsatzmanagmentsystems-
https://mops.eu
https://www.mops.eu

Check your stack JSON