Lucene search
MitreCVE-2024-41597HistoryJul 19, 2024 - 8:15 p.m.
CVE-2024-41597
2024-07-1920:15:08
CWE-352
mitre
web.nvd.nist.gov
23
processwire cross-site request forgery remote attack
CVSS3
4.2
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
AI Score
7.9
Confidence
Low
EPSS
0
Percentile
9.3%
Cross Site Request Forgery vulnerability in ProcessWire v.3.0.229 allows a remote attacker to execute arbitrary code via a crafted HTML file to the comments functionality.
Related
nvd
nvd
CVE-2024-41597
2024-07-19 20:15:08
vulnrichment
vulnrichment
CVE-2024-41597
2024-07-19 00:00:00
osv
osv
ProcessWire Cross Site Request Forgery vulnerability
2024-07-19 21:31:11
veracode
veracode
Cross-Site Request Forgery (CSRF)
2024-07-22 05:40:38
cvelist
cvelist
CVE-2024-41597
2024-07-19 00:00:00
github
github
ProcessWire Cross Site Request Forgery vulnerability
2024-07-19 21:31:11
CVSS3
4.2
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
AI Score
7.9
Confidence
Low
EPSS
0
Percentile
9.3%
Related for CVE-2024-41597