CVE-2024-50640

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

jeewx-boot 1.3 has an authentication bypass vulnerability in the preHandle function

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published
Aug 20, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-506418.1An authentication bypass vulnerability in PandoraNext-TokensTool v0.6.8 and before. An attacker can exploit this vulnerability to access APICVE-2024-506449.8zhisheng17 blog 3.0.1-SNAPSHOT has an authentication bypass vulnerability. An attacker can exploit this vulnerability to access API without CVE-2024-506459.8MallChat v1.0-SNAPSHOT has an authentication bypass vulnerability. An attacker can exploit this vulnerability to access API without any tokeCVE-2024-506477.5The python_food ordering system V1.0 has an unauthorized vulnerability that leads to the leakage of sensitive user information. Attackers caCVE-2024-506489.8yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improperly configured to pCVE-2024-506499.8The user avatar upload function in python_book V1.0 has an arbitrary file upload vulnerability.CVE-2024-50659.8A vulnerability classified as critical has been found in PHPGurukul Online Course Registration System 3.1. Affected is an unknown function oCVE-2024-506507.5python_book V1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different ICVE-2024-506516.5java_shop 1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs CVE-2024-506524.3A file upload vulnerability in java_shop 1.0 allows attackers to upload arbitrary files by modifying the avatar function.CVE-2024-506537.5CRMEB <=5.4.0 is vulnerable to Incorrect Access Control. Users can bypass the front-end restriction of only being able to claim coupons onceCVE-2024-506547.5lilishop <=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quantity limit by capturi
CVE-2024-50640: Critical severity, CVSS 9.8 | Vulnix