{"id":"CVE-2024-1144","aliases":["EUVD-2024-16913","GHSA-mwv8-7wjm-xvgf"],"status":"published","title":"Improper Access Control at Alma Devklan Blog","description":"Improper access control vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow an unauthenticated user to access the application's functionalities without the need for credentials.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00333,"percentile":0.26705,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284"],"published":"2024-03-19T11:32:49Z","modified":"2026-06-17T07:03:34Z","products":[{"vendor":"alma","product":"alma_blog"},{"vendor":"devklan","product":"alma blog"}],"references":[{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-alma-devklan-blog","tags":["x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1144"},{"url":"https://github.com/advisories/GHSA-mwv8-7wjm-xvgf"}],"sources":{"cve":[{"id":"CVE-2024-1144","title":"Improper Access Control at Alma Devklan Blog","description":"Improper access control vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow an unauthenticated user to access the application's functionalities without the need for credentials.","status":"published","published":"2024-03-19T11:32:49.261Z","modified":"2024-08-01T18:26:30.513Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:34:18.259965Z"}],"euvd":[{"id":"EUVD-2024-16913","description":"Improper access control vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow an unauthenticated user to access the application's functionalities without the need for credentials.","status":"published","published":"2024-03-19T11:32:49Z","modified":"2024-08-01T18:26:30Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T03:50:41.523881Z"}],"ghsa":[{"id":"GHSA-mwv8-7wjm-xvgf","title":"Improper access control vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and...","description":"Improper access control vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow an unauthenticated user to access the application's functionalities without the need for credentials.","status":"published","published":"2024-03-19T12:30:41Z","modified":"2024-03-19T12:30:49Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:55:40.943295Z"}],"nvd":[{"id":"CVE-2024-1144","description":"Improper access control vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow an unauthenticated user to access the application's functionalities without the need for credentials.","status":"published","published":"2024-03-19T12:15:07.91Z","modified":"2026-06-17T07:03:34.563Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:09:41.654534Z"}]}}