What’s Vulnerable › Vulnerabilities

CVE-2024-41603

• Severity: critical (CVSS 9.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-19 · updated 2026-06-17
• Weakness: CWE-352

Description

Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the URI /admin/layout.

Affected products

• spinacms/spina: 2.18.0

References

• https://github.com/topsky979/Security-Collections/tree/main/CVE-2024-41603
• https://github.com/topsky979/Security-Collections/tree/main/CVE-2024-41603

Get alerted when CVE-2024-41603 or the next vulnerability affects your stack