CVE-2024-1817

CVSS 3.1 Score 7.3 of 10 (high)

Details

Published Feb 23, 2024
Updated: May 17, 2024
CWE ID 287

Summary

CVE-2024-1817 is a critical vulnerability discovered in Demososo DM Enterprise Website Building System versions up to 2022.8. This issue affects the function dmlogin in the indexDM_load.php file of the Cookie Handler component. An attacker can exploit this vulnerability by manipulating the is_admin argument with the input "y", resulting in improper authentication. The exploit can be launched remotely and the identifer VDB-254605 has been assigned to this vulnerability. Despite early disclosure to the vendor, no response has been received from them. This vulnerability is now publicly disclosed and may be exploited.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share