CVE-2024-40035: CSRF

Published Jul 9, 2024

Updated

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userLeveldeal.php?mudi=add.

Affected Software

2 affected components

Sebrac Sebraccms

Sebrac Sebraccms=1.35

Event History

Jul 9, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-40035?

CVE-2024-40035 is classified as a medium severity vulnerability due to its potential for exploitation via Cross-Site Request Forgery (CSRF).

How do I fix CVE-2024-40035?

To fix CVE-2024-40035, implement CSRF protection mechanisms on the affected endpoint /admin/userLevel_deal.php.

What systems are affected by CVE-2024-40035?

CVE-2024-40035 affects idccms version 1.35 and potentially other versions if not patched.

What type of vulnerability is CVE-2024-40035?

CVE-2024-40035 is a Cross-Site Request Forgery (CSRF) vulnerability that can allow an attacker to perform unauthorized actions on behalf of an authenticated user.

How can I verify if my system is vulnerable to CVE-2024-40035?

You can verify if your system is vulnerable to CVE-2024-40035 by testing the functionality in /admin/userLevel_deal.php without a valid CSRF token.