CVE-2024-36588

NVD	https://nvd.nist.gov/vuln/detail/CVE-2024-36588
CWE	https://cwe.mitre.org/data/definitions/290.html

An issue in Annonshop.app DecentralizeJustice/ anonymousLocker commit 2b2b4 allows attackers to send messages erroneously attributed to arbitrary users via a crafted HTTP request.

Weakness

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

https://cwe.mitre.org/data/definitions/21.html
https://cwe.mitre.org/data/definitions/22.html
https://cwe.mitre.org/data/definitions/459.html
https://cwe.mitre.org/data/definitions/461.html
https://cwe.mitre.org/data/definitions/473.html
https://cwe.mitre.org/data/definitions/476.html
https://cwe.mitre.org/data/definitions/59.html
https://cwe.mitre.org/data/definitions/60.html
https://cwe.mitre.org/data/definitions/667.html
https://cwe.mitre.org/data/definitions/94.html

References

https://github.com/go-compile/security-advisories/blob/master/vulns/CVE-2024-36588.md
https://github.com/go-compile/security-advisories/blob/master/vulns/CVE-2024-36588.md

Authentication Bypass by Spoofing

Weakness

Related Attack Patterns

References