CVE-2024-53472: CSRF in control.php to change password

Thu, 05 Dec 2024 00:00:00 -0300

⚠ Replicated advisory. This post reproduces an advisory originally researched and published under the CVE Hunters. It is republished here for reference. The original disclosure followed coordinated vulnerability disclosure and the rules of the CVE Program.

🔗 Original advisory: https://www.cvehunters.com/p/cve-2024-53472/
📋 CVE record: CVE-2024-53472

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2024-53472

Vendor

WeGIA (Web Gerenciador Institucional) is an integrated management system licensed under the GNU GPL v3.0, designed to enhance administration, control, and transparency for institutions.

https://www.wegia.org

https://sol.sbc.org.br/index.php/latinoware/article/view/31544

CSRF on Natan Maia Morette

CVE-2024-53472: CSRF in control.php to change password

Vendor