brunosergi/bloodit

PoC

Bludit 3.9.2 - Auth Brute Force Mitigation Bypass. CVE-2019-17240

view exploit source poc_in_githubauthor brunosergipublished 2021-06-07catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-17240US	critical9.8	39.6% (99th)	Exploit	2019-10-06
bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many different forged X-Forwarded-For or Client-IP HTTP headers.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.