CVE-2024-10965 - CVE House

Back to Database

Status published Medium CVE-2024-10965

emqx neuron JSON File schema information disclosure

5.3 CVSS

Vulnerability Description

A vulnerability classified as problematic was found in emqx neuron up to 2.10.0. Affected by this vulnerability is an unknown functionality of the file /api/v2/schema of the component JSON File Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The patch is named c9ce39747e0372aaa2157b2b56174914a12c06d8. It is recommended to apply a patch to fix this issue.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-10965

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

susu199 (VulDB User)

References

More from emqx

View All →

MQTTX vulnerable to cross-site scripting via improper message payload rendering

emqx neuron plugin_handle.c handle_add_plugin buffer overflow

EMQ X Dashboard V3.0.0 is affected by username enumeration in...

Affected Vendor

emqx

View all reports →

Affected Software

neuron

Vulnerable Versions:

2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7, 2.8, 2.9, 2.10

Timeline

Official Publish: November 7th, 2024

Last Modified: November 8th, 2024

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-200 CWE-284

MITRE ATT&CK TTPs

T1213 Data from Information Repositories

T1005 Data from Local System

T1552 Unsecured Credentials

Credential Access

T1041 Exfiltration Over C2 Channel

T1190 Exploit Public-Facing Application

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1078 Valid Accounts

T1565.002 Stored Data Manipulation