CVE-2024-1817
CVSS 3.1 Score 7.3 of 10 (high)
Details
Summary
CVE-2024-1817 is a critical vulnerability discovered in Demososo DM Enterprise Website Building System versions up to 2022.8. This issue affects the function dmlogin in the indexDM_load.php file of the Cookie Handler component. An attacker can exploit this vulnerability by manipulating the is_admin argument with the input "y", resulting in improper authentication. The exploit can be launched remotely and the identifer VDB-254605 has been assigned to this vulnerability. Despite early disclosure to the vendor, no response has been received from them. This vulnerability is now publicly disclosed and may be exploited.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions