CVE-2024-39158: CSRF

Published Jun 27, 2024

Updated

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/userSysdeal.php?mudi=infoSet.

Affected Software

2 affected components

Sebrac Sebraccms

Sebrac Sebraccms=1.35

Event History

Jun 27, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-39158?

CVE-2024-39158 is a Cross-Site Request Forgery (CSRF) vulnerability that could allow unauthorized actions to be performed on behalf of authenticated users.

How do I fix CVE-2024-39158?

To fix CVE-2024-39158, implement anti-CSRF tokens in forms and ensure all state-changing requests are properly authenticated.

What components are affected by CVE-2024-39158?

CVE-2024-39158 affects the component /admin/userSys_deal.php?mudi=infoSet in IDCCMS v1.35.

Can CVE-2024-39158 be exploited remotely?

Yes, CVE-2024-39158 can potentially be exploited remotely if an attacker can craft malicious requests to the vulnerable endpoint.

Are there any known exploits for CVE-2024-39158?

As of now, there are no publicly available exploits for CVE-2024-39158, but the vulnerability poses a serious risk if not addressed.