CVE-2024-2911: Tianjin PubliCMS cross-site request forgery

Published Mar 26, 2024

Updated

A vulnerability, which was classified as problematic, was found in Tianjin PubliCMS 4.0.202302.e. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

2 affected components

Tianjin PubliCMS

PublicCMS PublicCMS=4.0.202302.e

Event History

Mar 26, 2024

CVE Published

via MITRE·09:31 PM

Data Sourced

via MITRE·09:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-2911?

CVE-2024-2911 is classified as problematic due to its potential for cross-site request forgery.

What systems are affected by CVE-2024-2911?

CVE-2024-2911 affects Tianjin PubliCMS version 4.0.202302.e.

How do I fix CVE-2024-2911?

To fix CVE-2024-2911, implement security measures to validate requests and mitigate cross-site request forgery.

Is CVE-2024-2911 exploitable remotely?

Yes, CVE-2024-2911 can be exploited remotely, allowing attackers to initiate the attack without physical access.

What type of vulnerability is CVE-2024-2911?

CVE-2024-2911 is a cross-site request forgery vulnerability that could allow unauthorized actions on behalf of users.