CVE-2024-7438: SimpleMachines SMF User Alert Read Status index.php resource injection
First published: Sat Aug 03 2024(Updated: )
A vulnerability has been found in SimpleMachines SMF 2.1.4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php?action=profile;u=2;area=showalerts;do=read of the component User Alert Read Status Handler. The manipulation of the argument aid leads to improper control of resource identifiers. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Simple Machines Forum | =2.1.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-7438?
CVE-2024-7438 is classified as a problematic vulnerability affecting SimpleMachines SMF 2.1.4.
How do I fix CVE-2024-7438?
To fix CVE-2024-7438, update to the latest version of SimpleMachines that addresses this vulnerability.
What components are affected by CVE-2024-7438?
CVE-2024-7438 affects the User Alert Read Status Handler in the file /index.php for SimpleMachines SMF 2.1.4.
What kind of vulnerability is CVE-2024-7438?
CVE-2024-7438 involves manipulation of functionalities related to user alert management in SimpleMachines SMF 2.1.4.
When was CVE-2024-7438 disclosed?
CVE-2024-7438 was disclosed in 2024 as a vulnerability for SimpleMachines SMF 2.1.4.
- agent/title
- agent/references
- agent/type
- agent/first-publish-date
- agent/severity
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/description
- agent/weakness
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/simplemachines
- canonical/simple machines forum
- version/simple machines forum/2.1.4