PT-2024-34542
CVE-2024-51157
·
تاريخ النشر
2024-11-08
·
تاريخ التحديث
2024-11-18
الوصف من
CVSS 3.1
4.7
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
07FLYCMS version 1.3.9
Description:
A Cross-Site Request Forgery (CSRF) issue was discovered in 07FLYCMS. The issue occurs via the component at "http://erp.07fly.net:80/oa/OaSchedule/add.html".
Recommendations:
For version 1.3.9, as a temporary workaround, consider restricting access to the vulnerable component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾