CVE-2024-54879 - SeaCMS V13.1 is vulnerable to Incorrect Access Control

Back Back to CVE browser

CRITICAL

SeaCMS V13.1 is vulnerable to Incorrect Access Control

Published Jan 6, 2025

9.1

CRITICAL

CVSS 3.1

EPSS 0.93%

Description

SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to recharge members indefinitely.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-281

References (1)

https://blog.csdn.net/weixin_46686336/article/details/144797242
ExploitThird Party Advisory

Link	Providers	Tags
https://blog.csdn.net/weixin_46686336/article/details/144797242		ExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 6, 2025

Updated Jul 5, 2026

Reserved Dec 6, 2024

Link CVE-2024-54879

CISA Vulnrichment

Updated Jan 7, 2025

NVD

Status Modified

Modified Jul 5, 2026

Link CVE-2024-54879

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-54879