CVE-2024-11125

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-11125

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-11125.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-11125

Published

2024-11-12T14:31:05Z

Modified

2026-08-12T03:51:20Z

Severity

6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

GetSimpleCMS profile.php cross-site request forgery

Details

A vulnerability was found in GetSimpleCMS 3.3.16 and classified as problematic. This issue affects some unknown processing of the file /admin/profile.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-352",
        "CWE-862"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/11xxx/CVE-2024-11125.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "3.3.16"
                },
                {
                    "last_affected": "3.3.16"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/getsimplecms/getsimplecms

Affected ranges

Type

GIT

Repo

https://github.com/getsimplecms/getsimplecms

Events

Introduced

e58b89e1efbd7e9cd3c9782c42d7f83ff0e74aad

Last Affected

e58b89e1efbd7e9cd3c9782c42d7f83ff0e74aad

Database specific

Show details

{
    "cpe": "cpe:2.3:a:get-simple:getsimplecms:3.3.16:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "3.3.16"
        },
        {
            "last_affected": "3.3.16"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

3.*

3.3.16

v3.*

v3.3.16

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-11125.json"