Description
bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many different forged X-Forwarded-For or Client-IP HTTP headers.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 2
- Bludit 3.9.2 - Auth Bruteforce Bypass EDB-48942 · webapps · Oct 23, 2020 · verified
- Bludit 3.9.2 - Authentication Bruteforce Mitigation Bypass EDB-48746 · webapps · Aug 17, 2020 · verified
GitHub 9 repositories
-
pingport80/CVE-2019-17240 ★ 3 · Jun 8, 2020
This is the exploit of CVE-2019-17240.
-
ColdFusionX/CVE-2019-17240_Bludit-BF-Bypass ★ 2 · Oct 21, 2020
Bludit <= 3.9.2 - Authentication Bruteforce Mitigation Bypass Exploit/PoC
-
0xDTC/Bludit-3.9.2-Auth-Bruteforce-Bypass-CVE-2019-17240 ★ 1 · Jan 11, 2025
Bludit 3.9.2 - Auth Bruteforce Bypass CVE:2019-17240 Refurbish In bash
-
spyx/cve-2019-17240 ★ 1 · Jun 15, 2021
-
mind2hex/CVE-2019-17240-Bludit-3.9.2-Auth-Bruteforce-Bypass ★ 0 · Mar 28, 2024
Bludit 3.9.2 auth bruteforce bypass
-
brunosergi/bloodit ★ 0 · Jun 7, 2021
Bludit 3.9.2 - Auth Brute Force Mitigation Bypass. CVE-2019-17240
-
jayngng/bludit-CVE-2019-17240 ★ 0 · Mar 22, 2021
Bypass bludit mitigation login form and upload malicious to call a rev shell
-
triple-octopus/Bludit-CVE-2019-17240-Fork ★ 0 · Jul 28, 2020
Better version of rastating.github.io/bludit-brute-force-mitigation-bypass/
-
LucaReggiannini/Bludit-3-9-2-bb ★ 0 · Jun 24, 2020
Bludit 3.9.2 - bruteforce bypass - CVE-2019-17240
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- https://rastating.github.io/bludit-brute-force-mitigation-bypass/
- https://github.com/bludit/bludit/pull/1090
- http://packetstormsecurity.com/files/158875/Bludit-3.9.2-Authentication-Bruteforce-Mitigation-Bypass.html
- http://packetstormsecurity.com/files/159664/Bludit-3.9.2-Bruteforce-Mitigation-Bypass.html