CVE-2024-50858
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Jan 14, 2025
Updated: Jan 15, 2025
CWE ID 352
Summary
CVE-2024-50858 is a newly identified vulnerability affecting GestioIP v3.5.7. This issue permits attackers to perform Cross-Site Request Forgery (CSRF) attacks against multiple endpoints. By hosting a malicious URL, an attacker can manipulate the admin's browser to execute unintended actions. These actions could result in data modification, deletion, or exfiltration, posing a significant threat to the affected system.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.