CVE-2024-3151: falha de média gravidade em Bdtask Multi-Store Inventory Management System
Bdtask Multi-Store Inventory Management System Stock Movement Page cross-site request forgery
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.3epss 0.4%
A vulnerability, which was classified as problematic, was found in Bdtask Multi-Store Inventory Management System up to 20240325. Affected is an unknown function of the file /stockmovment/stockmovment/delete/ of the component Stock Movement Page. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-258924. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
Bdtask · Multi-Store Inventory Management SystemCVEs relacionadas — Bdtask Multi-Store Inventory Management System
No mesmo produto, das mais perigosas para as menos.
CVE-2024-2997LOWBdtask Multi-Store Inventory Management System cross site scriptingEPSS 1.2%CVE-2024-2998LOWBdtask Multi-Store Inventory Management System Store Update Page cross site scriptingEPSS 0.5%CVE-2024-2996LOWBdtask Multi-Store Inventory Management System Page Title cross site scriptingEPSS 0.5%CVE-2026-10172MEDIUMBdtask Multi-Store Inventory Management System Component Module.php upload unrestricted uploadEPSS 0.2%CVE-2026-10155MEDIUMBdtask Multi-Store Inventory Management System Accounts Report Accounts.php accounts_report_search sql injectionEPSS 0.2%