CVE-2024-32090

Summary

CVE-2024-32090: A Cross-Site Request Forgery (CSRF) vulnerability has been discovered in the Andy Moyle Church Admin software. This issue, which affects versions from n/a to 4.0.27, enables an attacker to trick a user into executing unintended actions on a web application in their name. The vulnerable action can result in data modifications or unauthorized access, posing a significant risk to users and their data. It is recommended that users upgrade to the latest version of the software to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.