What’s Vulnerable › Vulnerabilities

CVE-2024-41602

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-19 · updated 2026-06-17
• Weakness: CWE-352

Description

Cross Site Request Forgery vulnerability in Spina CMS v.2.18.0 and before allows a remote attacker to escalate privileges via a crafted URL

Affected products

• spinacms/spina: 2.18.0

References

• https://github.com/topsky979/Security-Collections/tree/main/CVE-2024-41602
• https://github.com/topsky979/Security-Collections/tree/main/CVE-2024-41602

Get alerted when CVE-2024-41602 or the next vulnerability affects your stack