CVE-2024-35555: CSRF
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/shareswitch.php?mudi=switch&dataType=newsWeb&fieldName=state&fieldName2=state&tabName=infoWeb&dataID=40.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35555?
CVE-2024-35555 is classified as a high severity vulnerability due to its potential for exploitation through Cross-Site Request Forgery.
How do I fix CVE-2024-35555?
To remediate CVE-2024-35555, it is recommended to implement anti-CSRF tokens and validate user sessions for actions that modify state.
What are the potential impacts of CVE-2024-35555?
Exploitation of CVE-2024-35555 can lead to unauthorized changes to application state and user data, compromising the integrity of the web application.
Which versions of IDCCMS are affected by CVE-2024-35555?
CVE-2024-35555 affects IDCCMS version 1.35 and potentially older versions that share similar vulnerabilities.
How can I identify if my application is vulnerable to CVE-2024-35555?
You can identify vulnerability to CVE-2024-35555 by reviewing your application for CSRF protection mechanisms and testing the endpoint /admin/share_switch.php for unauthorized actions.