CVE-2024-6400

8.2 highEPSS 0.6%

High (8.2) in finrota finrota. EPSS 0.6% chance of exploitation in the next 30 days.

Cleartext Storage of Sensitive Information, Exposure of Sensitive Information Through Data Queries vulnerability in Finrota Netahsilat allows Retrieve Embedded Sensitive Data, Authentication Bypass, IMAP/SMTP Command Injection, Collect Data from Common Resource Locations. This issue solved in versions 1.21.10, 1.23.01, 1.23.08, 1.23.11 and 1.24.03.

Severity

CVSS 4.0

8.2 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:L/VA:L/SC:H/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWEs: CWE-202, CWE-312
Published: 2024-10-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

finrota:finrota

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1611
https://www.usom.gov.tr/bildirim/tr-24-1611

Check your stack JSON