Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2024-40332
HistoryJul 10, 2024 - 12:00 a.m.

CVE-2024-40332

2024-07-1000:00:00
mitre
github.com
4
idccms
v1.35
csrf
vulnerability
money record
deletion

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

24.7%

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecord_deal.php?mudi=delRecord

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:idccms_project:idccms:-:*:*:*:*:*:*:*"
    ],
    "vendor": "idccms_project",
    "product": "idccms",
    "versions": [
      {
        "status": "affected",
        "version": "v1.35"
      }
    ],
    "defaultStatus": "unknown"
  }
]

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

24.7%

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-40332