CVE-2024-38729

Summary

CVE-2024-38729 is a Cross-Site Request Forgery (CSRF) vulnerability affecting MBE Worldwide S.p.A.'s MBE eShip software. This issue enables unauthorized users to submit malicious requests on behalf of other users, potentially leading to data manipulation or unauthorized actions. The CSRF vulnerability can be exploited by attackers to carry out unintended operations on the affected system. MBE eShip versions from n/a through 2.1.2 are reportedly impacted by this vulnerability. Users are advised to update their software as soon as a patch becomes available to mitigate the risk of exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.