CVE-2024-22939: CSRF
Published Feb 1, 2024
·Updated
Cross Site Request Forgery vulnerability in FlyCms v.1.0 allows a remote attacker to execute arbitrary code via the system/article/categoryedit component.
Affected Software
1 affected component
sunkaifei FlyCMS=1.0
Event History
Jan 25, 2024
Exploit Published
via GitHub·07:00 AM
Feb 1, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Feb 29, 2024
Data Sourced
via NVD·01:44 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-22939?
CVE-2024-22939 has a medium severity rating due to its potential for allowing remote code execution.
2
How do I fix CVE-2024-22939?
To fix CVE-2024-22939, update to the latest version of FlyCms that addresses this vulnerability.
3
Who is affected by CVE-2024-22939?
CVE-2024-22939 affects all users of FlyCms version 1.0.
4
What type of attack is CVE-2024-22939 associated with?
CVE-2024-22939 is associated with Cross Site Request Forgery (CSRF) attacks.
5
What can an attacker do with CVE-2024-22939?
An attacker can execute arbitrary code on the server via the system/article/category_edit component.