Medium severity5.3NVD Advisory· Published Nov 1, 2024· Updated Jun 17, 2026

CVE-2024-10620

Description

A vulnerability was found in knightliao Disconf 2.6.36. It has been classified as critical. This affects an unknown part of the file /api/config/list of the component Configuration Center. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Knightliao/Disconfreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =2.6.36

Patches

Vulnerability mechanics

References

github.com/knightliao/disconf/issues/431nvd
github.com/knightliao/disconf/issues/431nvd
vuldb.comnvd
vuldb.comnvd
vuldb.comnvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000