CVE-2024-35553: CSRF
Published May 22, 2024
·Updated
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMovedeal.php?mudi=add&nohrefStr=close.
Affected Software
1 affected component
Sebrac Sebraccms
Event History
Jan 1, 1970
CVE Published
via MITRE·12:00 AM
May 22, 2024
CVE Published
via NVD·02:15 PM
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Aug 2, 2024
Data Sourced
via MITRE·02:15 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-35553?
CVE-2024-35553 has been classified as a moderate severity vulnerability.
2
How do I fix CVE-2024-35553?
To fix CVE-2024-35553, ensure that CSRF protections are implemented and validated on the affected endpoint.
3
What type of vulnerability is CVE-2024-35553?
CVE-2024-35553 is a Cross-Site Request Forgery (CSRF) vulnerability.
4
Which component of idccms is affected by CVE-2024-35553?
CVE-2024-35553 affects the /admin/infoMove_deal.php component of idccms.
5
What version of idccms is impacted by CVE-2024-35553?
CVE-2024-35553 affects idccms version 1.35.