CVE-2024-35009: CSRF

Published May 14, 2024

Updated

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/shareswitch.php?mudi=switch&dataType=&fieldName=state&fieldName2=state&tabName=banner&dataID=6.

Affected Software

2 affected components

Sebrac Sebraccms

Sebrac Sebraccms=1.35

Event History

Jan 1, 1970

CVE Published

via MITRE·12:00 AM

May 14, 2024

CVE Published

via NVD·04:17 PM

Aug 10, 2024

Data Sourced

via MITRE·04:13 AM

Description

Frequently Asked Questions

What is the severity of CVE-2024-35009?

CVE-2024-35009 is classified as a medium severity vulnerability due to its potential to allow unauthorized actions on behalf of logged-in users.

How do I fix CVE-2024-35009?

To fix CVE-2024-35009, implement anti-CSRF tokens in forms and validate requests to ensure they are genuine.

What software is affected by CVE-2024-35009?

CVE-2024-35009 affects idccms version 1.35 and could potentially impact other versions if they utilize the same vulnerable component.

What type of vulnerability is CVE-2024-35009?

CVE-2024-35009 is a Cross-Site Request Forgery (CSRF) vulnerability that allows attackers to perform actions on behalf of users.

How can I detect CVE-2024-35009 in my application?

To detect CVE-2024-35009, review your application for CSRF vulnerabilities, particularly in forms that handle state changes.