CVE-2024-11071
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Apr 7, 2025
CWE ID 942
CWE ID 352
Summary
CVE-2024-11071 is a vulnerability affecting the local API server in Cyberdigm's DestinyECM solution. This issue involves a Permissive Cross-domain Policy with Untrusted Domains, making it susceptible to Cross-Site Request Forgery (CSRF) attacks. Successful CSRF attacks can lead to JSON Hijacking or JavaScript Hijacking via a malicious web page. The specific versions of DestinyECM impacted by this vulnerability have not been explicitly stated, but users are urged to contact the vendor for further information.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.