CVE-2024-37435

Summary

CVE-2024-37435 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Perfect Portfolio component of Rara Theme. This issue enables an attacker to submit unintended commands to the application on behalf of an unsuspecting user. The vulnerability affects Perfect Portfolio versions from n/a through 1.2.0. An attacker could exploit this weakness to manipulate user data or perform undesired actions on the affected website. To mitigate this risk, it is recommended that users update their Perfect Portfolio component to the latest version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.