CVE-2024-34009

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Insufficient checks whether ReCAPTCHA was enabled made it possible to bypass the checks on the login page. This did not affect other pages where ReCAPTCHA is utilized.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
May 31, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-340108.2Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud AgentCVE-2024-340116.8Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (WindoCVE-2024-340124.4Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cloud Manager (Windows) before bCVE-2024-340137.8Local privilege escalation due to OS command injection vulnerability. The following products are affected: Acronis True Image (macOS) beforeCVE-2024-340145.5Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin CVE-2024-340153.3Sensitive information disclosure during file browsing due to improper symbolic link handling. The following products are affected: Acronis BCVE-2024-340166.5Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (WindoCVE-2024-340177.3Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before buiCVE-2024-340185.5Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Snap Deploy (Windows) befoCVE-2024-340197.3Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before buiCVE-2024-34025.4A stored Cross-Site Scripting (XSS) vulnerability existed in version (20240121) of gaizhenbiao/chuanhuchatgpt due to inadequate sanitizationCVE-2024-340206.5A stack-based buffer overflow was found in the putSDN() function of mail.c in hcode through 2.1.
CVE-2024-34009: High severity, CVSS 7.5 | Vulnix