Lucene search

CVE-2024-36668

🗓️ 05 Jun 2024 19:15:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 54 Views🌐 WEB

idccms v1.35 CSRF vulnerability in admin pag

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2024-36668	5 Jun 202419:00	–	cvelist
RedhatCVE	CVE-2024-36668	14 Feb 202505:30	–	redhatcve
NVD	CVE-2024-36668	5 Jun 202419:15	–	nvd
Vulnrichment	CVE-2024-36668	5 Jun 202419:00	–	vulnrichment

Nvd

Vulnrichment

Node

idccms_project idccmsMatch1.35

Source	Link
github	www.github.com/sigubbs/cms/blob/main/35/csrf.md

Parameter	Position	Path	Description	CWE
mudi	query param	/admin/type_deal.php	Cross-Site Request Forgery (CSRF) vulnerability in idccms v1.35 allows attackers to execute unwanted actions on behalf of authenticated users.	CWE-352

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Jun 2024 19:15Current

7.4High risk

Vulners AI Score7.4

CVSS38.8

EPSS0.0002

SSVC

CWE-352