CVE-2024-51727

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a feature that could enable attackers to invalidate a legitimate user's session and cause a denial-of-service attack on a user's account.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-826

Affected software

No affected versions have been published.

Timeline

Published: Dec 6, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-517297.8In the Linux kernel, the following vulnerability has been resolved: mm: use aligned address in copy_user_gigantic_page() In current kernel CVE-2024-51735.4The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Video player widget se CVE-2024-517348.7Zope AccessControl provides a general security framework for use in Zope. In affected versions anonymous users can delete the user data main CVE-2024-517358.7Osmedeus is a Workflow Engine for Offensive Security. Cross-site Scripting (XSS) occurs on the Osmedues web server when viewing results from CVE-2024-517369.8Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. On Windows, when an executable file na CVE-2024-517377.0RediSearch is a Redis module that provides querying, secondary indexing, and full-text search for Redis. An authenticated redis user executi CVE-2024-517388.1Sunshine is a self-hosted game stream host for Moonlight. In 0.23.1 and earlier, Sunshine's pairing protocol implementation does not validat CVE-2024-517395.3Combodo iTop is a simple, web based IT Service Management tool. Unauthenticated user can perform users enumeration, which can make it easier CVE-2024-51745.3A flaw in Gliffy results in broken authentication through the reset functionality of the application.CVE-2024-517408.8Combodo iTop is a simple, web based IT Service Management tool. This vulnerability can be used to create HTTP requests on behalf of the serv CVE-2024-517414.4Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL se CVE-2024-517438.8MarkUs is a web application for the submission and grading of student assignments. In versions prior to 2.4.8, an arbitrary file write vulne