CVE-2024-51037
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
A vulnerability in kodbox version 1.52.04 and earlier allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function.
Risk Assessment
An attacker can exploit this flaw to intercept credentials or other confidential data, potentially leading to unauthorized system access.
Recommendation
Immediately update kodbox to a version later than 1.52.04 where this vulnerability is fixed.
Other vulnerabilities in kodbox
See all- CVE-2026-18721Medium
A vulnerability has been found in kalcaddle kodbox 1.67 Build 02 in the file /user/sso/apiLogin of the SSO API Login component. Manipulation of the argument callbackUrl leads to open redirect. The attack can be initiated remotely, and the exploit has been publicly disclosed.
- CVE-2026-5618Medium
In kodbox up to version 1.64, a Server-Side Request Forgery (SSRF) vulnerability exists in the shareMake/shareCheck component. Manipulating the siteFrom/siteTo arguments allows server-side requests. The attack is remote but difficult. The exploit is public. The vendor did not respond.
Original NVD description (English source)
An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS