CVE-2024-38790
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Jan 2, 2025
CWE ID 352
Summary
CVE-2024-38790 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Smartsupp platform, which includes live chat, chatbots, AI, and lead generation tools. The issue allows unauthorized users to perform malicious actions on behalf of an unsuspecting user, potentially leading to unintended changes or data loss. The vulnerability affects all versions of Smartsupp from n/a through 3.6. It is essential for users to apply the necessary patches or upgrades to mitigate this risk and secure their systems.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.