CVE-2024-11142

Description

Cross-Site Request Forgery (CSRF) vulnerability in Gosoft Software Proticaret E-Commerce allows Cross Site Request Forgery. This issue affects Proticaret E-Commerce: before v6.0 NOTE: According to the vendor, fixing process is still ongoing for v4.05.

PUBLISHED Reserved 2024-11-12 | Published 2025-05-02 | Updated 2026-06-02 | Assigner TR-CERT

Problem types

CWE-352 Cross-Site Request Forgery (CSRF)

Product status

Credits

Ersin ERENLER finder

NSC Informatics sponsor

References

www.usom.gov.tr/bildirim/tr-25-0098 government-resource broken-link

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0098 government-resource

cve.org (CVE-2024-11142)

nvd.nist.gov (CVE-2024-11142)

Download JSON