{"id":"CVE-2024-35539","aliases":["EUVD-2024-35356","GHSA-m5f9-w97j-4hmr"],"status":"published","title":"Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting...","description":"Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function. This vulnerability allows attackers to post several comments before the spam protection checks if the comments are posted too frequently.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.01445,"percentile":0.73454,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-290"],"published":"2024-08-19T00:00:00Z","modified":"2026-10-28T02:31:06Z","exploits":[{"source":"exploitdb","id":"EDB-52161","title":"Typecho 1.3.0 - Race Condition","type":"webapps","platform":"php","date":"2025-04-10","url":"https://www.exploit-db.com/exploits/52161"}],"products":[{"vendor":"typecho","product":"cms"},{"vendor":"typecho","product":"typecho"}],"references":[{"url":"https://typecho.org","tags":["Product","web"]},{"url":"https://cyberaz0r.info/2024/08/typecho-multiple-vulnerabilities/","tags":["Exploit","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-35539","tags":["advisory"]},{"url":"https://cyberaz0r.info/2024/08/typecho-multiple-vulnerabilities"},{"url":"https://github.com/advisories/GHSA-m5f9-w97j-4hmr"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35539.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-35539","description":"Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function. This vulnerability allows attackers to post several comments before the spam protection checks if the comments are posted too frequently.","status":"published","published":"2024-08-19T00:00:00Z","modified":"2024-08-21T14:07:18.801Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T14:34:20.313092Z"}],"euvd":[{"id":"EUVD-2024-35356","description":"Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function. This vulnerability allows attackers to post several comments before the spam protection checks if the comments are posted too frequently.","status":"published","published":"2024-08-19T00:00:00Z","modified":"2024-08-21T14:07:18Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T00:56:14.188111Z"}],"ghsa":[{"id":"GHSA-m5f9-w97j-4hmr","title":"Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting...","description":"Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function. This vulnerability allows attackers to post several comments before the spam protection checks if the comments are posted too frequently.","status":"published","published":"2024-08-19T21:35:12Z","modified":"2024-08-21T15:31:57Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T14:58:01.859506Z"}],"nvd":[{"id":"CVE-2024-35539","description":"Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function. This vulnerability allows attackers to post several comments before the spam protection checks if the comments are posted too frequently.","status":"published","published":"2024-08-19T21:15:09.913Z","modified":"2026-06-17T07:34:59.52Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T14:10:19.870727Z"}],"osv":[{"id":"CVE-2024-35539","description":"Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function. This vulnerability allows attackers to post several comments before the spam protection checks if the comments are posted too frequently.","status":"published","published":"2024-08-19T00:00:00Z","modified":"2026-10-28T02:31:06.859738385Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:40.704083Z"}]}}