CVE-2024-7438: SimpleMachines SMF User Alert Read Status index.php resource injection
A vulnerability has been found in SimpleMachines SMF 2.1.4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php?action=profile;u=2;area=showalerts;do=read of the component User Alert Read Status Handler. The manipulation of the argument aid leads to improper control of resource identifiers. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7438?
CVE-2024-7438 is classified as a problematic vulnerability affecting SimpleMachines SMF 2.1.4.
How do I fix CVE-2024-7438?
To fix CVE-2024-7438, update to the latest version of SimpleMachines that addresses this vulnerability.
What components are affected by CVE-2024-7438?
CVE-2024-7438 affects the User Alert Read Status Handler in the file /index.php for SimpleMachines SMF 2.1.4.
What kind of vulnerability is CVE-2024-7438?
CVE-2024-7438 involves manipulation of functionalities related to user alert management in SimpleMachines SMF 2.1.4.
When was CVE-2024-7438 disclosed?
CVE-2024-7438 was disclosed in 2024 as a vulnerability for SimpleMachines SMF 2.1.4.