CVE-2024-37431

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Jan 2, 2025
CWE ID 352

Summary

CVE-2024-37431 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Horea Radu Mesmerize software. This issue enables malicious actors to submit unauthorized requests on behalf of other users who are currently logged into the vulnerable system. The Mesmerize software, which includes versions from n/a up to and including 1.6.120, is susceptible to this CSRF flaw. This vulnerability could potentially lead to unintended actions being taken within the affected system.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share