SecuriTricks - CVE-2024-54879

Description

SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to recharge members indefinitely.

Product(s) Impacted

Vendor	Product	Versions
Seacms	Seacms	13.1

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-281

Improper Preservation of Permissions

The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

*CPE(s)

Affected systems and software identified for this CVE.

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
a	seacms	seacms	13.1	/	/	/	/	/	/	/

References

http://seacms.com

https://blog.csdn.net/weixin_46686336/article/details/144797242

CVSS Score

9.1 / 10

CVSS Data - 3.1

Attack Vector: NETWORK
Attack Complexity: LOW
Privileges Required: NONE
Scope: UNCHANGED
Confidentiality Impact: HIGH
Integrity Impact: HIGH
Availability Impact: NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

View Vector String

Timeline

Published: Jan. 6, 2025, 6:15 p.m.
Last Modified: March 28, 2025, 5:12 p.m.

Status : Analyzed

CVE has had analysis completed and all data associations made.

More info

Source

cve@mitre.org

CVE-2024-54879