PT-2024-17889
CVE-2024-13032
·
تاريخ النشر
2024-12-30
·
تاريخ التحديث
2025-01-06
الوصف من
CVSS 4.0
5.1
متوسطةالمقاييسAV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Antabot White-Jotter versions up to 0.2.2
Description
A problematic issue has been found in the Article Editor component, specifically in the /admin/content/editor file, affecting an unknown functionality. The manipulation of the
articleCover argument leads to server-side request forgery. This issue can be exploited remotely. The exploit has been disclosed to the public and may be used.Recommendations
For versions up to 0.2.2, consider disabling the
articleCover argument in the /admin/content/editor file as a temporary workaround until a patch is available. Restrict access to the Article Editor component to minimize the risk of exploitation. Avoid using the articleCover argument in the affected functionality until the issue is resolved.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾