CVE-2024-28141

Summary

CVE-2024-28141 is a cross-site request forgery (CSRF) vulnerability affecting a web application. An attacker can exploit this flaw to induce users into executing unwanted actions on the application, such as resetting admin passwords or creating new users, by tricking them into visiting an attacker-controlled website or clicking on a malicious link. The application fails to implement sufficient protections against CSRF attacks, leaving it vulnerable to potential security breaches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.