PT-2024-29349 · Unknown · Flatpress Cms

Parag Bagul · Published 2024-10-01 · Updated 2025-04-23 · CVE-2024-41290

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions FlatPress CMS versions 1.3 through 1.3.1

Description The issue concerns the use of insecure methods to store authentication data via the cookie's component.

Recommendations For FlatPress CMS versions 1.3 through 1.3.1, consider updating the authentication mechanism to securely store and handle authentication data. As a temporary workaround, restrict access to sensitive areas of the application to minimize the risk of exploitation. Avoid using insecure cookie components until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-315

Related Identifiers

CVE-2024-41290

Affected Products

Flatpress Cms

References · 8

• 🔥 https://github.com/paragbagul111/CVE-2024-41290 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-41290 · Security Note
• https://osv.dev/vulnerability/CVE-2024-41290 · Vendor Advisory
• https://t.me/cvenotify/119474 · Telegram Post
• https://twitter.com/CVEnew/status/1841527257816563931 · Twitter Post
• https://twitter.com/cracbot/status/1843169453783269671 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1841129128776339592 · Twitter Post
• https://t.me/cvedetector/6844 · Telegram Post