CVE-2024-38751
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Jan 2, 2025
CWE ID 352
Summary
CVE-2024-38754 represents a Cross-Site Request Forgery (CSRF) vulnerability in Taggbox's software. Affecting versions from n/a to 3.3, this issue enables attackers to manipulate users' actions on the Taggbox platform through deceitful requests. By exploiting this CSRF vulnerability, attackers can execute unintended functions on behalf of the user, potentially leading to sensitive data exposure or unauthorized modifications. It is crucial for Taggbox users to apply the necessary security patches to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.