CVE-2024-9917: HuangDou UTCMS template_creat.php deserialization
First published: Sun Oct 13 2024(Updated: )
A vulnerability, which was classified as critical, was found in HuangDou UTCMS V9. This affects an unknown part of the file app/modules/ut-template/admin/template_creat.php. The manipulation of the argument content leads to deserialization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Usualtool CMS | =9.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-9917?
CVE-2024-9917 is classified as a critical severity vulnerability.
How does CVE-2024-9917 affect HuangDou UTCMS V9?
CVE-2024-9917 affects the deserialization process in the app/modules/ut-template/admin/template_creat.php file.
What type of attack can be initiated using CVE-2024-9917?
An attacker can perform a remote attack through the manipulation of the argument content.
How can I mitigate the risk of CVE-2024-9917?
Mitigation can be achieved by updating to the latest version of Usualtool Usualtoolcms or applying relevant patches.
What should I do if I am using HuangDou UTCMS V9?
If you are using HuangDou UTCMS V9, you should review security practices and apply fixes for CVE-2024-9917 immediately.
- agent/weakness
- agent/title
- agent/references
- agent/description
- agent/first-publish-date
- agent/type
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/trending
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/usualtool
- canonical/usualtool cms
- version/usualtool cms/9.0