CVE-2024-36669: CSRF
Published Jun 5, 2024
·Updated
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/typedeal.php?mudi=add.
Affected Software
1 affected component
Idccms Project Idccms=1.35
Event History
Jan 1, 1970
CVE Published
via MITRE·12:00 AM
Jun 5, 2024
CVE Published
via NVD·07:15 PM
Aug 19, 2024
Data Sourced
via MITRE·04:49 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-36669?
CVE-2024-36669 is classified as a significant security vulnerability due to the potential for unauthorized actions through Cross-Site Request Forgery.
2
How do I fix CVE-2024-36669?
To fix CVE-2024-36669, it is recommended to implement anti-CSRF tokens in the forms and methods that are vulnerable within idccms v1.35.
3
What systems are affected by CVE-2024-36669?
CVE-2024-36669 affects idccms version 1.35 and can lead to unauthorized actions if exploited.
4
What type of vulnerability is CVE-2024-36669?
CVE-2024-36669 is identified as a Cross-Site Request Forgery (CSRF) vulnerability.
5
How can I mitigate the risks associated with CVE-2024-36669?
Mitigation strategies for CVE-2024-36669 include ensuring user authentication and implementing proper CSRF protections in applications.