CVE-2024-52401

Published Nov 19, 2024

Last updated 3 months ago

CVSS critical 9.6

Overview

Description: Cross-Site Request Forgery (CSRF) vulnerability in 荒野无灯 Hacklog DownloadManager allows Upload a Web Shell to a Web Server.This issue affects Hacklog DownloadManager: from n/a through 2.1.4.
Source: audit@patchstack.com
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Secondary
Base score: 9.6
Impact score: 6
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

audit@patchstack.com: CWE-352

Hype score: Not currently trending

[CVE-2024-52401: CRITICAL] Warning: CSRF vulnerability in 荒野无灯 Hacklog DownloadManager allows attackers to upload a web shell to a web server. Update Hacklog DownloadManager from n/a to version 2.1.5.#cybersecurity,#vulnerability https://t.co/WZ4ax5sEED https://t.co/qz9NPjUiML
@CveFindCom
21 Nov 2024
50 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes

References