CVE-2024-45527

Summary

CVE-2024-45527 is a vulnerability found in REDCap version 14.7.0 that allows for HTML injection through the project title during the creation of a new project. This flaw can lead to Cross-Site Request Forgery (CSRF) attacks, enabling unauthorized logouts and the potential insertion of links to external phishing sites. The vulnerability has a medium severity rating with an exploitability score of 2.8, indicating it requires user interaction but poses risks to the integrity and confidentiality of data. Organizations using this version of REDCap should remediate the issue by implementing input validation measures to prevent HTML injection. Failure to address this vulnerability could expose users to phishing attempts and unauthorized actions within their projects.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.