CVE-2024-54880 - SeaCMS V13.1 is vulnerable to Incorrect Access Control

CRITICAL

SeaCMS V13.1 is vulnerable to Incorrect Access Control

Published Jan 6, 2025

9.1

CRITICAL

CVSS 3.1

EPSS 0.90%

SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to register accounts in bulk.

No remediation recorded yet.

Weaknesses (1)

CWE-281

Link	Providers	Tags
https://blog.csdn.net/weixin_46686336/article/details/144797063		ExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-52688		Advisory
https://www.seacms.net/		Product

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jan 6, 2025

Updated Jan 7, 2025

Reserved Dec 6, 2024

Updated Jan 7, 2025

Status Analyzed

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Jan 6, 2025

Updated Jan 7, 2025

Exploited since n/a