Medium
Spina CMS cross-site request forgery
Type: advisorySources: OSV
A vulnerability was found in Spina CMS up to 2.18.0. It has been classified as problematic. Affected is an unknown function of the file /admin/pages/. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-272346 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2024-7065
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 3 Nov 2026, 23:48 UTC · Revision 1
Source evidence
A vulnerability was found in Spina CMS up to 2.18.0. It has been classified as problematic. Affected is an unknown function of the file /admin/pages/. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-272346 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
osv:CVE-2024-7065
Complete source record
{
"id": "d71f0ce70e5cf9afc7eff466f86cf9f46503464c126eb3381d3fcf96af6fdb5e",
"url": "https://osv.dev/vulnerability/CVE-2024-7065",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Spina CMS cross-site request forgery",
"summary": "A vulnerability was found in Spina CMS up to 2.18.0. It has been classified as problematic. Affected is an unknown function of the file /admin/pages/. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-272346 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.",
"evidence": "osv:CVE-2024-7065",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2024-7065",
"aliases": [
"CVE-2024-7065"
],
"metrics": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/spinacms/spina",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "d76f8657f746429bf792ce60c6c12f1c26385825"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:denkgroot:spina:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "2.18.0"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"v2.18.0",
"v2.17.0",
"v2.16.0",
"v2.15.1",
"v2.15.0",
"v2.14.0",
"v2.13.1",
"v2.13.0",
"v2.12.0",
"v2.11.0",
"v2.10.0",
"v2.9.1",
"v2.9.0",
"v2.8.1",
"v2.8.0",
"v2.7.0",
"v2.6.2",
"v2.6.1",
"v2.6.0",
"v2.5.0",
"v.2.4.0",
"v2.3.5",
"v2.3.4",
"v2.3.3",
"v2.3.2",
"v2.3.1",
"v2.3.0",
"v2.2.0",
"v2.1.1",
"v2.1.0",
"v2.0.2",
"v2.0.1",
"v2.0.0",
"v2.0.0.beta",
"v2.0.0.alpha",
"v1.2.0",
"v1.1.4",
"v1.1.3",
"v1.1.2",
"v1.1.1",
"v1.1.0",
"v1.0.3",
"v1.0.2",
"v1.0.1",
"v1.0.0",
"v0.12.1",
"v0.12.0",
"v0.11.1",
"v0.11.0",
"v0.9.0",
"v0.8.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-7065.json"
}
}
],
"modified": "2026-10-28T02:30:32.237930516Z",
"provider": "osv",
"references": [
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/7xxx/CVE-2024-7065.json",
"https://nvd.nist.gov/vuln/detail/CVE-2024-7065",
"https://vuldb.com/?id.272346",
"https://vuldb.com/?submit.375236",
"https://vuldb.com/?ctiid.272346",
"https://github.com/topsky979/Security-Collections/blob/main/1700810/README.md"
],
"provider_metadata": {
"cwe_ids": [
"CWE-352"
],
"cna_assigner": "VulDB",
"unresolved_ranges": [
{
"extracted_events": [
{
"range": [
{
"introduced": "2.0"
},
{
"last_affected": "2.0"
},
{
"introduced": "2.1"
},
{
"last_affected": "2.1"
},
{
"introduced": "2.2"
},
{
"last_affected": "2.2"
},
{
"introduced": "2.3"
},
{
"last_affected": "2.3"
},
{
"introduced": "2.4"
},
{
"last_affected": "2.4"
},
{
"introduced": "2.5"
},
{
"last_affected": "2.5"
},
{
"introduced": "2.6"
},
{
"last_affected": "2.6"
},
{
"introduced": "2.7"
},
{
"last_affected": "2.7"
},
{
"introduced": "2.8"
},
{
"last_affected": "2.8"
},
{
"introduced": "2.9"
},
{
"last_affected": "2.9"
},
{
"introduced": "2.10"
},
{
"last_affected": "2.10"
},
{
"introduced": "2.11"
},
{
"last_affected": "2.11"
},
{
"introduced": "2.12"
},
{
"last_affected": "2.12"
},
{
"introduced": "2.13"
},
{
"last_affected": "2.13"
},
{
"introduced": "2.14"
},
{
"last_affected": "2.14"
},
{
"introduced": "2.15"
},
{
"last_affected": "2.15"
},
{
"introduced": "2.16"
},
{
"last_affected": "2.16"
},
{
"introduced": "2.17"
},
{
"last_affected": "2.17"
},
{
"introduced": "2.18"
},
{
"last_affected": "2.18"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
}
]
}
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/7xxx/CVE-2024-7065.json"
}
},
"related_cves": [
{
"value": "CVE-2024-7065",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 499280,
"published_at": "2024-07-24T09:31:03.848+00:00"
}