-
Byte Open Security
(ByteOS Network)
Log In
Sign Up
CVE Vulnerability Details :
CVE-2024-2232
PUBLISHED
More Info
Official Page
Assigner
-
WPScan
Assigner Org ID
-
1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81
View Known Exploited Vulnerability (KEV) details
Published At
-
05 Aug, 2024 | 06:00
Updated At
-
07 Aug, 2024 | 13:43
Rejected At
-
▼
CVE Numbering Authority (CNA)
Himer - Social Questions and Answers < 2.1.3 - CSRF While Sending the Invites
The lacks CSRF checks allowing a user to invite any user to any group (including private groups)
Affected Products
Vendor
Unknown
Product
Himer
Default Status
unaffected
Versions
Affected
From
0
before
2.1.3
(semver)
Problem Types
Type
CWE ID
Description
CWE
CWE-352
CWE-352 Cross-Site Request Forgery (CSRF)
Type:
CWE
CWE ID:
CWE-352
Description:
CWE-352 Cross-Site Request Forgery (CSRF)
Metrics
Version
Base score
Base severity
Vector
Metrics Other Info
Impacts
CAPEC ID
Description
Solutions
Configurations
Workarounds
Exploits
Credits
finder
Sushmita Poudel
coordinator
WPScan
Timeline
Event
Date
Replaced By
Rejected Reason
References
Hyperlink
Resource
https://wpscan.com/vulnerability/a2df28d3-bf03-4fd3-b231-86e062739899/
exploit
vdb-entry
technical-description
Hyperlink:
https://wpscan.com/vulnerability/a2df28d3-bf03-4fd3-b231-86e062739899/
Resource:
exploit
vdb-entry
technical-description
▼
Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Vendor
2code
Product
himer
CPEs
cpe:2.3:a:2code:himer:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
From
0
before
2.1.3
(semver)
Metrics
Version
Base score
Base severity
Vector
3.1
8.1
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Version:
3.1
Base score:
8.1
Base severity:
HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Metrics Other Info
Impacts
CAPEC ID
Description
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
Event
Date
Replaced By
Rejected Reason
References
Hyperlink
Resource
Details not found