CVE-2024-46600

Summary

CVE-2024-46600 is a newly discovered vulnerability affecting the dingfanzu CMS version 1.0. This issue involves a Cross-Site Request Forgery (CSRF) weakness in the /admin/doAdminAction.php?act=delCate&id=31 endpoint. An attacker can exploit this CSRF vulnerability to induce unintended actions on the affected system by tricking a user into visiting a malicious website or clicking a crafted link. The attacker does not require any prior authentication or access to the targeted account. This flaw poses a significant risk to websites utilizing the vulnerable version of dingfanzu CMS, making it essential to apply the available patch as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.