CVE-2024-8301

Summary

CVE-2024-8301 is a critical vulnerability affecting dingfanzu CMS versions up to commit 29d67d9044f6f93378e6eb6ff92272217ff7225c, specifically in the file /ajax/checkin.php. This flaw allows for SQL injection through manipulation of the "username" argument, which can be exploited remotely without requiring authentication or user interaction. The vulnerability poses potential risks to data integrity and confidentiality, with a CVSS base score of 7.3 indicating high severity. To remediate this issue, organizations are advised to monitor for updates from the vendor or apply mitigations against SQL injection attacks. The vendor was notified about this vulnerability but did not respond prior to public disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.