CVE-2024-40038: CSRF
Published Jul 9, 2024
·Updated
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userScoredeal.php?mudi=rev
Affected Software
2 affected components
Sebrac Sebraccms
Sebrac Sebraccms=1.35
Event History
Jul 9, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-40038?
CVE-2024-40038 is classified as a medium severity vulnerability due to its potential for Cross-Site Request Forgery (CSRF) attacks.
2
What does CVE-2024-40038 affect?
CVE-2024-40038 affects IDCCMS version 1.35 specifically through the /admin/userScore_deal.php?mudi=rev endpoint.
3
How do I fix CVE-2024-40038?
To fix CVE-2024-40038, implement CSRF tokens in forms and validate requests to ensure they originate from authenticated users.
4
What type of vulnerability is CVE-2024-40038?
CVE-2024-40038 is a Cross-Site Request Forgery (CSRF) vulnerability that allows unauthorized actions on behalf of authenticated users.
5
Are there any known exploits for CVE-2024-40038?
As of now, specific exploit examples for CVE-2024-40038 have not been publicly documented.