CVE-2024-30460

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Mar 29, 2024
Updated: Apr 1, 2024
CWE ID 352

Summary

CVE-2024-30460 is a Cross-Site Request Forgery (CSRF) vulnerability that has been identified in Tumult Inc's Tumult Hype Animations. Affecting versions from n/a to 1.9.11, this issue allows malicious actors to initiate unintended actions on a user's behalf, potentially leading to unauthorized data modifications or unintended application interactions. This can pose a serious risk to users, particularly in scenarios where sensitive data is being processed or transmitted. To mitigate this risk, it is recommended that users update to the latest version of Tumult Hype Animations as soon as possible, and that developers carefully consider implementing appropriate CSRF protection measures in their applications.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share