CVE-2024-2911

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-2911

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-2911.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-2911

Published

2024-03-26T21:31:04.749Z

Modified

2026-07-08T07:57:20.435263315Z

Severity

6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Tianjin PubliCMS cross-site request forgery

Details

A vulnerability, which was classified as problematic, was found in Tianjin PubliCMS 4.0.202302.e. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "4.0.202302.e"
                },
                {
                    "last_affected": "4.0.202302.e"
                }
            ]
        }
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/2xxx/CVE-2024-2911.json",
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-352"
    ]
}

References

Affected packages

Git / github.com/sanluan/publiccms

Affected ranges

Type

GIT

Repo

https://github.com/sanluan/publiccms

Events

Introduced

a6806be8129e01ad57b0e703442002d424790b99

Last affected

a6806be8129e01ad57b0e703442002d424790b99

Database specific

{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:publiccms:publiccms:4.0.202302.e:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.0.202302.e"
        },
        {
            "last_affected": "4.0.202302.e"
        }
    ]
}

Affected versions

4.*

4.0.202302.e

V4.*

V4.0.202302.f

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-2911.json"