CVE-2024-51487

Summary

CVE-2024-51487 is a vulnerability affecting Ampache, a web-based audio/video streaming application. The flaw lies in the token parsing process, which fails to validate CSRF tokens during catalog activation or deactivation. An attacker can exploit this vulnerability to execute CSRF attacks, altering website features that should be restricted to administrators. This issue is resolved in version 7.0.1, and users are advised to upgrade as soon as possible. No known workarounds exist for this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.