CyberRota Analysis
AI-GeneratedA vulnerability exists in the Money Transfer Handler of Azuriom CMS versions up to 1.2.12, specifically in the transferMoney function, which is susceptible to a time-of-check time-of-use issue. Although the exploit requires a high level of complexity and is considered difficult to execute, it can be initiated remotely, potentially compromising financial transactions. Organizations using affected versions should prioritize upgrading to version 1.2.13 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in Azuriom CMS up to 1.2.12. This issue affects the function transferMoney of the file app/Http/Controllers/ProfileController.php of the component Money Transfer Handler. This manipulation causes time-of-check time-of-use. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitability is assessed as difficult. Upgrading to version 1.2.13 is capable of addressing this issue. Patch name: ae5596a9548e010a8a79838806eff60ef9554539. Upgrading the affected component is advised. The vendor was contacted early about this disclosure.