Medium severityNVD Advisory· Published Jan 10, 2025· Updated Apr 15, 2026

CVE-2024-6880

Description

During MegaBIP installation process, a user is encouraged to change a default path to administrative portal, as keeping it secret is listed by the author as one of the protection mechanisms. Publicly available source code of "/registered.php" discloses that path, allowing an attacker to attempt further attacks.

This issue affects MegaBIP software versions below 5.15

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GitHub/Orginferred
Range: <5.15
Megabip/Megabipllm-fuzzy
Range: <5.15

Patches

Vulnerability mechanics

References

cert.pl/en/posts/2024/09/CVE-2024-6680nvd
megabip.plnvd
www.gov.pl/web/cyfryzacja/rekomendacja-pelnomocnika-rzadu-ds-cyberbezpieczenstwa-dotyczaca-biuletynow-informacji-publicznejnvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000