← Volver a CVEs
CVE-2024-7438
MEDIUM4.3
Descripcion
A vulnerability has been found in SimpleMachines SMF 2.1.4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php?action=profile;u=2;area=showalerts;do=read of the component User Alert Read Status Handler. The manipulation of the argument aid leads to improper control of resource identifiers. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Detalles CVE
Puntuacion CVSS v3.14.3
SeveridadMEDIUM
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosLOW
Interaccion usuarioNONE
Publicado8/3/2024
Ultima modificacion9/11/2024
Fuentenvd
Avistamientos honeypot0
Productos afectados
simplemachines:simple_machines_forum
Debilidades (CWE)
CWE-99CWE-639
Referencias
https://github.com/Fewword/Poc/blob/main/smf/smf-poc2.md(cna@vuldb.com)
https://vuldb.com/?ctiid.273523(cna@vuldb.com)
https://vuldb.com/?id.273523(cna@vuldb.com)
https://vuldb.com/?submit.380190(cna@vuldb.com)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.