CVE-2024-36548: CSRF
Published Jun 4, 2024
·Updated
idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/vpsCompanydeal.php?mudi=del
Affected Software
1 affected component
Sebrac Sebraccms=1.35
Event History
Jan 1, 1970
CVE Published
via MITRE·12:00 AM
Jun 4, 2024
CVE Published
via NVD·03:15 PM
Aug 19, 2024
Data Sourced
via MITRE·03:32 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-36548?
CVE-2024-36548 is classified as a medium severity vulnerability due to the potential for unauthorized actions through Cross-Site Request Forgery.
2
How do I fix CVE-2024-36548?
To fix CVE-2024-36548, implement anti-CSRF tokens in your forms to ensure that requests cannot be forged.
3
What does CVE-2024-36548 affect?
CVE-2024-36548 affects idccms version 1.35, specifically through the admin/vpsCompany_deal.php endpoint.
4
Is CVE-2024-36548 exploitable remotely?
Yes, CVE-2024-36548 can be exploited remotely if an attacker can trick an authenticated user into making a malicious request.
5
Are there any known exploits for CVE-2024-36548?
As of now, there are no publicly disclosed exploits specifically for CVE-2024-36548, but the vulnerability itself is a known attack vector.