CVE-2024-13035

Summary

CVE-2024-13035 is a newly disclosed critical vulnerability that affects the code-projects Chat System 1.0. The issue lies within the /admin/update_user.php file, specifically in an unknown section of code. An attacker can exploit this vulnerability through sql injection by manipulating the id argument. This attack can be initiated remotely, increasing the risk to organizations using this software. The exploit for this vulnerability has been made public, making it imperative that affected organizations take immediate action to patch or mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.