CVE-2024-44028
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Oct 6, 2024
Updated: Oct 7, 2024
CWE ID 352
Summary
CVE-2024-44028 is a newly disclosed vulnerability that affects the NiceJob platform. This issue involves a Cross-Site Request Forgery (CSRF) vulnerability, which can be exploited by attackers to execute malicious actions on behalf of a user. Additionally, there is a Stored Cross-Site Scripting (XSS) issue in NiceJob, allowing attackers to inject malicious scripts into web pages viewed by other users. These vulnerabilities were present before the release of version 3.6.5 and pose a significant risk to NiceJob users.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.