Lucene search
HistoryJul 19, 2024 - 8:15 p.m.
CVE-2024-41597
cve-2024-41597
processwire v.3.0.229
cross site request forgery
execute arbitrary code
crafted html file
comments functionality
CVSS3
4.2
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
EPSS
0
Percentile
9.3%
Cross Site Request Forgery vulnerability in ProcessWire v.3.0.229 allows a remote attacker to execute arbitrary code via a crafted HTML file to the comments functionality.
Related
vulnrichment
vulnrichment
CVE-2024-41597
2024-07-19 00:00:00
veracode
veracode
Cross-Site Request Forgery (CSRF)
2024-07-22 05:40:38
cve
cve
CVE-2024-41597
2024-07-19 20:15:08
osv
osv
ProcessWire Cross Site Request Forgery vulnerability
2024-07-19 21:31:11
cvelist
cvelist
CVE-2024-41597
2024-07-19 00:00:00
github
github
ProcessWire Cross Site Request Forgery vulnerability
2024-07-19 21:31:11
CVSS3
4.2
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
EPSS
0
Percentile
9.3%
Related for NVD:CVE-2024-41597