CVE-2024-47635
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Oct 5, 2024
Updated: Oct 7, 2024
CWE ID 352
Summary
CVE-2024-47635 represents a Cross-Site Request Forgery (CSRF) vulnerability discovered in TinyPNG. Affecting versions from n/a to 3.4.3, this issue allows an attacker to execute malicious actions on behalf of a user by tricking them into visiting a specially crafted website. The vulnerability underlines the importance of proper CSRF token usage to protect against such attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share