CVE-2024-0523

Summary

CVE-2024-0523 is a critical vulnerability affecting CmsEasy versions up to 7.7.7. The issue lies within the getslide_child_action function in lib/admin/language_admin.php, which is susceptible to SQL injection. Manipulation of the argument sid can lead to remote attacks. Despite early disclosure to the vendor, no response was received, and the exploit has since been made public. The vulnerability has been assigned the identifier VDB-250693.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.