CVE-2023-51489

Summary

CVE-2023-51489 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Crowdsignal Dashboard – Polls, Surveys & more, from version n/a through 3.0.11. An attacker could exploit this issue to force unintended actions on a user's account, such as modifying or deleting polls or surveys, by tricking them into clicking a malicious link. The attacker doesn't need to know the user's login credentials, making it a serious security risk. Automattic, Inc. has since released a patch to address this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.