Lucene search
+L

3 matches found

NVD
NVD
•added 2024/08/20 1:15 p.m.•30 views

CVE-2024-42585

A Cross-Site Request Forgery CSRF in the component deletemedia.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

8.8CVSS0.00307EPSS
SaveExploits1References1
CVE
CVE
•added 2024/08/20 12:00 a.m.•80 views

CVE-2024-42585

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Warehouse Inventory System v2.0 . The issue stems from the delete_media.php component failing to adequately verify that incoming requests originate from a trusted user. An attacker can exploit this weakness to spoof malicious request...

8.8CVSS7.3AI score0.00307EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/20 12:00 a.m.•3 views

CVE-2024-42585: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component deletemedia.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

8.8CVSS5.7AI score0.00307EPSS
SaveExploits1References1
Rows per page
Query Builder