CVE-2024-9282

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-9282

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-9282.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-9282

Published

2024-09-27T13:00:07.408Z

Modified

2026-07-15T01:49:17.595623327Z

Severity

6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

bg5sbk MiniCMS page-edit.php cross-site request forgery

Details

A vulnerability was found in bg5sbk MiniCMS 1.11. It has been classified as problematic. Affected is an unknown function of the file page-edit.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions confusing version and file name information. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-352"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/9xxx/CVE-2024-9282.json"
}

References

Affected packages

Git / github.com/bg5sbk/minicms

Affected ranges

Type

GIT

Repo

https://github.com/bg5sbk/minicms

Events

Introduced

f8fc729c046ee2a8a671711017c77424f06b25d8

Fixed

f8fc729c046ee2a8a671711017c77424f06b25d8

Database specific

{
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ],
    "cpe": "cpe:2.3:a:1234n:minicms:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.11"
        },
        {
            "last_affected": "1.11"
        },
        {
            "introduced": "0"
        },
        {
            "fixed": "1.11"
        }
    ]
}

Affected versions

1.*

1.11

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-9282.json"