High severity7.5NVD Advisory· Published Jul 26, 2024· Updated Jun 17, 2026

CVE-2024-24257

Description

An issue in skteco.com Central Control Attendance Machine web management platform v.3.0 allows an attacker to obtain sensitive information via a crafted script to the csl/user component.

Affected products

Idssgmcc/Araninferred
Range: =3.0
Skteco.com/Central Control Attendance Machinellm-create
Range: 3.0

Patches

Vulnerability mechanics

References

idssgmcc.github.io/aran.github.io/1.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000