CVE Radar Logo
CVERadar
CVE Radar Logo
CVERadar

CVE-2024-10605

High Severity
Fabianros
SVRS
61/100

CVSSv3
6.5/10

EPSS
0.00051/1

CVE-2024-10605: Cross-Site Request Forgery (CSRF) vulnerability in Blood Bank Management System 1.0. This vulnerability allows remote attackers to execute unwanted actions on behalf of legitimate users. The vulnerability exists in the /file/request.php component of the application.

CVE-2024-10605 is a CSRF flaw in the Blood Bank Management System, allowing attackers to perform actions without user consent. With an SVRS of 61, while not critical, this vulnerability poses a significant security risk as it has been disclosed publicly and is actively being exploited in the wild. Successful exploitation could lead to unauthorized data modification or malicious actions performed under the guise of an authorized user. Organizations using this system should implement immediate patching and mitigation strategies to prevent potential attacks. It is important to apply security measures to prevent CSRF attacks.

In The Wild
CVSS:3.1
AV:N
AC:L
PR:N
UI:R
S:U
C:N
I:H
A:N
2024-11-01

2024-11-05

Indicators of Compromise

No IOCs found for this CVE

Exploits

No exploits found for this CVE

Enhance Your CVE Management with SOCRadar Vulnerability Intelligence
Get comprehensive CVE details, real-time notifications, and proactive threat management all in one platform.
CVE Details
Access comprehensive CVE information instantly
Real-time Tracking
Subscribe to CVEs and get instant updates
Exploit Analysis
Monitor related APT groups and threats
IOC Tracking
Analyze and track CVE-related IOCs

News

CVE-2024-10605 | code-projects Blood Bank Management System 1.0 /file/request.php cross-site request forgery
vuldb.com2025-03-02
CVE-2024-10605 | code-projects Blood Bank Management System 1.0 /file/request.php cross-site request forgery | A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /file/request.php. The manipulation leads to cross-site request forgery. This vulnerability is uniquely identified as CVE-2024-10605. It is possible to initiate
vuldb.com
rss
forum
news

Social Media

🚨 CVE-2024-10605 (Published: 2024-11-01) - A critical vulnerability in Code-Projects version 434756.0 has been identified. Users are urged to update to the latest version immediately to mitigate risks. For more details and remediation steps, visit: https://t.co/PeRsmEMdLz
0
0
0
🚨 CVE-2024-10605 (Published: 2024-11-01) affects multiple versions of the product. Exploitation can lead to serious vulnerabilities. Ensure you update to the latest version and apply all recommended patches immediately. Stay secure! More info: https://t.co/PeRsmEMdLz
0
0
0

Affected Software

Configuration 1
TypeVendorProduct
AppFabianrosblood_bank_management_system

References

ReferenceLink
[email protected]https://code-projects.org/
[email protected]https://github.com/bevennyamande/receiver_request_sample_csrf
[email protected]https://vuldb.com/?ctiid.282615
[email protected]https://vuldb.com/?id.282615
[email protected]https://vuldb.com/?submit.434756
GITHUBhttps://github.com/bevennyamande/receiver_request_sample_csrf

CWE Details

CWE IDCWE NameDescription
CWE-352Cross-Site Request Forgery (CSRF)The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

CVE Radar

Real-time CVE Intelligence & Vulnerability Management Platform

CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.

Get Free Vulnerability Intelligence AccessAccess real-time CVE monitoring, exploit analysis, and threat intelligence