PT-2024-36718 · Amiro.Cms · Amiro.Cms

Published 2024-12-16 · Updated 2025-04-23 · CVE-2024-56116

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Amiro.CMS versions prior to 7.8.4

Description A Cross-Site Request Forgery vulnerability in Amiro.CMS allows remote attackers to create an administrator account.

Recommendations For Amiro.CMS versions prior to 7.8.4, update to version 7.8.4 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive account creation functionality until a patch is applied.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2024-56116

Affected Products

Amiro.Cms

References · 7

• 🔥 https://github.com/ComplianceControl/CVE-2024-56116 · Exploit
• https://osv.dev/vulnerability/CVE-2024-56116 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-56116 · Security Note
• https://t.me/cvedetector/13270 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1868600018703159436 · Twitter Post
• https://twitter.com/CVEnew/status/1869511610366324856 · Twitter Post
• https://t.me/cvenotify/119602 · Telegram Post