Lucene search

CVE-2024-41964

🗓️ 29 Aug 2024 17:07:15Reported by [email protected]Type

Kirby CMS allows unauthorized updates to language definitions, fixed in versions 3.6.6.6, 3.7.5.5, 3.8.4.4, 3.9.8.2, 3.10.1.1, and 4.3.

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 8
OSV	CVE-2024-41964	29 Aug 202417:15	–	osv
OSV	GHSA-JM9M-RQR3-WFMH Kirby has insufficient permission checks in the language settings	29 Aug 202417:55	–	osv
Vulnrichment	CVE-2024-41964 Insufficient permission checks in the language settings in Kirby CMS	29 Aug 202416:19	–	vulnrichment
Cvelist	CVE-2024-41964 Insufficient permission checks in the language settings in Kirby CMS	29 Aug 202416:19	–	cvelist
RedhatCVE	CVE-2024-41964	5 Feb 202507:41	–	redhatcve
CVE	CVE-2024-41964	29 Aug 202417:15	–	cve
Veracode	Improper Authorization	30 Aug 202411:46	–	veracode
Github Security Blog	Kirby has insufficient permission checks in the language settings	29 Aug 202417:55	–	github

Nvd

Node

getkirby kirbyRange<3.6.6.6

getkirby kirbyRange3.7.0–3.7.5.5

getkirby kirbyRange3.8.0–3.8.4.4

getkirby kirbyRange3.9.0–3.9.8.2

getkirby kirbyRange3.10.0–3.10.1.1

getkirby kirbyRange4.0.0–4.3.1

Source	Link
github	www.github.com/getkirby/kirby/security/advisories/GHSA-jm9m-rqr3-wfmh
github	www.github.com/getkirby/kirby/commit/ab95d172667c3cd529917c2bc94d3c7969706d23

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 Aug 2024 17:15Current

CVSS38.1

EPSS0.00186

CWE-863