CVE-2024-25692

Summary

CVE-2024-25692 is a cross-site request forgery (CSRF) vulnerability affecting Esri Portal for ArcGIS versions 11.1 and below. This issue enables unauthenticated attackers to manipulate authorized users into executing unwanted actions through specially crafted forms. Despite the potential for limited impact on Confidentiality and Integrity, it is recommended that users update to the latest version to mitigate this low-severity risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.