ColdFusionX/CVE-2019-17240_Bludit-BF-Bypass

PoC

Bludit <= 3.9.2 - Authentication Bruteforce Mitigation Bypass Exploit/PoC

view exploit source poc_in_githubauthor ColdFusionXpublished 2020-10-21catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-17240US	critical9.8	39.6% (99th)	Exploit	2019-10-06
bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many different forged X-Forwarded-For or Client-IP HTTP headers.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.