How severe is CVE-2024-57603?

CVE-2024-57603 has a CVSS 3.x base score of 6.3, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is low, integrity low, and availability low.

Is CVE-2024-57603 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (33rd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2024-57603?

CVE-2024-57603 affects Mayswind Ezbookkeeping. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2024-57603?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2024-57603 have an EU (EUVD) identifier?

Yes. CVE-2024-57603 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-53640.

When was CVE-2024-57603 published?

CVE-2024-57603 was published on 2025-02-12 and last updated on 2026-06-17.

CVE-2024-57603

CVE-2024-57603 is a medium-severity vulnerability in Mayswind Ezbookkeeping with a CVSS 3.x base score of 6.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-799.

Key facts

Severity: Medium (CVSS 3.x base score 6.3)
EPSS exploit prediction: 0% (33rd percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2024-53640
Weakness: CWE-799
Affected product: Mayswind Ezbookkeeping
Published: 2025-02-12
Last modified: 2026-06-17

Description

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the lack of rate limiting.

Frequently asked questions

What is CVE-2024-57603?: An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the lack of rate limiting.
How severe is CVE-2024-57603?: CVE-2024-57603 has a CVSS 3.x base score of 6.3, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is low, integrity low, and availability low.
Is CVE-2024-57603 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (33rd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2024-57603?: CVE-2024-57603 affects Mayswind Ezbookkeeping. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2024-57603?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2024-57603 have an EU (EUVD) identifier?: Yes. CVE-2024-57603 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-53640.
When was CVE-2024-57603 published?: CVE-2024-57603 was published on 2025-02-12 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:mayswind:ezbookkeeping:0.7.0:*:*:*:*:*:*:*

More vulnerabilities in Mayswind Ezbookkeeping

CVE-2024-57604 — Critical (CVSS 9.8): An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component.
CVE-2025-65519 — Medium (CVSS 6.5): mayswind ezbookkeeping versions 1.2.0 and earlier contain a critical vulnerability in JSON and XML file import…

All CVEs affecting Mayswind Ezbookkeeping →

Other CWE-799 vulnerabilities

CVE-2025-54321 — Critical (CVSS 9.8): In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an…
CVE-2025-29998 — High (CVSS 8.2): This vulnerability exists in the CAP back office application due to missing rate limiting on OTP requests in an API…
CVE-2026-7402 — High (CVSS 8.1): Improper Control of Interaction Frequency vulnerability in MeWare Software Development Inc. PDKS allows Flooding. This…
CVE-2026-24017 — High (CVSS 8.1): An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet FortiWeb 8.0.0 through…
CVE-2021-41177 — High (CVSS 8.1): Nextcloud is an open-source, self-hosted productivity platform. Prior to versions 20.0.13, 21.0.5, and 22.2.0,…
CVE-2026-30972 — High (CVSS 7.5): Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior o…

Browse all CWE-799 vulnerabilities →