CVE-2024-49294

Summary

CVE-2024-49294 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the MagePeople Team Bus Ticket Booking with Seat Reservation module. This issue enables an attacker to manipulate a user's session and execute unintended actions, such as ticket purchases or modifications, on their behalf. The vulnerability can be exploited through specially crafted malicious requests, posing a serious risk to users who have logged in to the affected system. The issue impacts versions of the Bus Ticket Booking with Seat Reservation module from n/a through 5.4.3. It is essential for users to update to a patched version as soon as possible to mitigate the risk of exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.