CVE-2024-1817

Summary

CVE-2024-1817 is a newly disclosed critical vulnerability affecting Demososo DM Enterprise Website Building System versions up to 2022.8. The issue lies in the dmlogin function of the indexDM_load.php file in the Cookie Handler component. An attacker can exploit this vulnerability by manipulating the is_admin argument with the input "y," resulting in improper authentication. This vulnerability allows remote attacks and has been made public, increasing the risk of exploitation. The identifier VDB-254605 has been assigned to this vulnerability, and the vendor was contacted but failed to respond to the disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.