CVE-2024-41597

2024-07-1900:00:00

mitre

github.com

cross site request forgery

processwire

remote attacker

arbitrary code

crafted html file

comments functionality

AI Score

7.6

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Cross Site Request Forgery vulnerability in ProcessWire v.3.0.229 allows a remote attacker to execute arbitrary code via a crafted HTML file to the comments functionality.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:processwire:processwire:3.0.229:*:*:*:*:*:*:*"
    ],
    "vendor": "processwire",
    "product": "processwire",
    "versions": [
      {
        "status": "affected",
        "version": "3.0.229"
      }
    ],
    "defaultStatus": "unknown"
  }
]