CVE-2024-13032

CVSS 3.1 Score 4.9 of 10 (medium)

Details

Published Dec 30, 2024
Updated: Jan 6, 2025
CWE ID 918

Summary

CVE-2024-13032 is a newly disclosed vulnerability affecting Antabot White-Jotter up to version 0.2.2. The issue lies in an unknown functionality of the component's Article Editor, specifically the /admin/content/editor/articleCover path. An attacker can exploit this vulnerability through server-side request forgery by manipulating the articleCover argument. The exploit can be executed remotely, making it a significant security risk. The vulnerability has been made public, increasing the likelihood of exploitation.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share