PT-2024-17889

CVE-2024-13032

·

تاريخ النشر

2024-12-30

·

تاريخ التحديث

2025-01-06

الوصف من

CVSS 4.0
5.1
متوسطة
المقاييسAV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Antabot White-Jotter versions up to 0.2.2
Description A problematic issue has been found in the Article Editor component, specifically in the /admin/content/editor file, affecting an unknown functionality. The manipulation of the articleCover argument leads to server-side request forgery. This issue can be exploited remotely. The exploit has been disclosed to the public and may be used.
Recommendations For versions up to 0.2.2, consider disabling the articleCover argument in the /admin/content/editor file as a temporary workaround until a patch is available. Restrict access to the Article Editor component to minimize the risk of exploitation. Avoid using the articleCover argument in the affected functionality until the issue is resolved.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾