CVE-2024-11125

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-11125

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-11125.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-11125

Published

2024-11-12T15:15:06.347Z

Modified

2026-04-10T05:08:13.939343Z

Severity

4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVSS Calculator

Summary

[none]

Details

A vulnerability was found in GetSimpleCMS 3.3.16 and classified as problematic. This issue affects some unknown processing of the file /admin/profile.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

References

Affected packages

Git / github.com/getsimplecms/getsimplecms

Affected ranges

Type

GIT

Repo

https://github.com/getsimplecms/getsimplecms

Events

Introduced

Last affected

e58b89e1efbd7e9cd3c9782c42d7f83ff0e74aad

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.3.16"
        }
    ]
}

Affected versions

3.*

3.3.12

3.3.15

v3.*

v3.1.1

v3.1.2

v3.2.1

v3.2.2

v3.3.14

v3.3.14b1

v3.3.14b2

v3.3.16

v3.3.5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-11125.json"