CVE-2024-52401
Cross-Site Request Forgery (CSRF) (CWE-352)
Published: Nov 19, 2024 / Updated: 11h ago
010
CVSS 9.6No EPSS yetCritical
CVE info copied to clipboard
Cross-Site Request Forgery (CSRF) vulnerability in 荒野无灯 Hacklog DownloadManager allows Upload a Web Shell to a Web Server.This issue affects Hacklog DownloadManager: from n/a through 2.1.4.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Timeline
CVE Assignment
NVD published the first details for CVE-2024-52401
Nov 19, 2024 at 5:15 PM
CVSS
A CVSS base score of 9.6 has been assigned.
Nov 19, 2024 at 5:21 PM / nvd
First Article
Feedly found the first article mentioning CVE-2024-52401. See article
Nov 19, 2024 at 5:24 PM / National Vulnerability Database
CVSS Estimate
Feedly estimated the CVSS score as HIGH
Nov 19, 2024 at 5:24 PM
Affected Systems
Wordpress/wordpress
+null more
Attack Patterns
CAPEC-111: JSON Hijacking (aka JavaScript Hijacking)
+null more
News
CVE-2024-52401 - Hacklog DownloadManager CSRF Web Shell Upload Vulnerability November 19, 2024 at 05:15PM https:// ift.tt/Dh9r8cI # CVE # IOC # CTI # ThreatIntelligence # ThreatIntel # Cybersecurity # Recon
CVE-2024-52401 - Hacklog DownloadManager CSRF Web Shell Upload Vulnerability
CVE ID : CVE-2024-52401 Published : Nov. 19, 2024, 5:15 p.m. 17 minutes ago Description : Cross-Site Request Forgery (CSRF) vulnerability in 荒野无灯 Hacklog DownloadManager allows Upload a Web Shell to a Web Server.This issue affects Hacklog DownloadManager: from n/a through 2.1.4. Severity: 9.6
CVE-2024-52401
Cross-Site Request Forgery (CSRF) vulnerability in ???? Hacklog DownloadManager allows Upload a Web Shell to a Web Server.This issue affects Hacklog DownloadManager: from n/a through 2.1.4.
CVE-2024-52401
Cross-Site Request Forgery (CSRF) vulnerability in 荒野无灯 Hacklog DownloadManager allows Upload a Web Shell to a Web Server.This issue affects Hacklog DownloadManager: from n/a through...
CVE-2024-52401 WordPress Hacklog DownloadManager plugin <=2.1.4 - CSRF to Arbitrary File Upload vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in 荒野无灯 Hacklog DownloadManager allows Upload a Web Shell to a Web Server.This issue affects Hacklog DownloadManager: from n/a through...