2024-07-05 20:04:00 +00:00
{
"id" : "CVE-2024-39021" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2024-07-05T19:15:10.000" ,
2024-07-09 18:03:12 +00:00
"lastModified" : "2024-07-09T17:15:48.083" ,
2024-07-08 16:03:14 +00:00
"vulnStatus" : "Awaiting Analysis" ,
2024-07-05 20:04:00 +00:00
"cveTags" : [ ] ,
"descriptions" : [
{
"lang" : "en" ,
2024-07-09 18:03:12 +00:00
"value" : "idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsApiData_deal.php?mudi=del"
2024-07-08 16:03:14 +00:00
} ,
{
"lang" : "es" ,
"value" : "Se descubri\u00f3 que idccms v1.35 conten\u00eda una falsificaci\u00f3n de solicitud entre sitios (CSRF) a trav\u00e9s del componente http://127.0.0.1:80/admin/vpsApiData_deal.php?mudi=del"
2024-07-05 20:04:00 +00:00
}
] ,
"metrics" : { } ,
"references" : [
{
"url" : "https://github.com/da271133/cms2/blob/main/45/csrf.md" ,
"source" : "cve@mitre.org"
}
]
}