CVE-2024-42628

Summary

CVE-2024-42628 is a newly disclosed Cross-Site Request Forgery (CSRF) vulnerability affecting FrogCMS version 0.9.5. This issue allows attackers to manipulate user actions on the admin dashboard by intercepting and modifying valid requests. The vulnerability can be exploited through the /admin/?/snippet/edit/3 endpoint, potentially leading to unauthorized content modifications or management actions. Users are strongly encouraged to update to the latest version of FrogCMS to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.