CVE-2024-36668: CSRF

Published Jun 5, 2024

Updated

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/typedeal.php?mudi=del

Affected Software

1 affected component

Idccms Project Idccms=1.35

Event History

Jan 1, 1970

CVE Published

via MITRE·12:00 AM

Jun 5, 2024

CVE Published

via NVD·07:15 PM

Aug 19, 2024

Data Sourced

via MITRE·03:32 PM

Description

Frequently Asked Questions

What is the severity of CVE-2024-36668?

CVE-2024-36668 is considered a moderate severity vulnerability due to the potential impact of Cross-Site Request Forgery (CSRF) attacks on user accounts.

How do I fix CVE-2024-36668?

To fix CVE-2024-36668, implement CSRF protection measures in the affected component admin/type_deal.php, such as using CSRF tokens.

What component is affected by CVE-2024-36668?

CVE-2024-36668 specifically affects the admin/type_deal.php component in idccms version 1.35.

How can I determine if my system is vulnerable to CVE-2024-36668?

To determine if your system is vulnerable to CVE-2024-36668, verify that you are running idccms version 1.35 and check for the presence of CSRF protections.

What type of attack is facilitated by CVE-2024-36668?

CVE-2024-36668 facilitates Cross-Site Request Forgery (CSRF) attacks, allowing unauthorized actions to be performed on behalf of authenticated users.