CVE-2024-51489

Summary

CVE-2024-51489 is a vulnerability affecting the Ampache media streaming application. The issue lies in the current implementation of token parsing, which fails to properly validate CSRF tokens during user message transmission. An attacker can exploit this weakness to launch CSRF attacks, enabling them to send malicious messages to any user, including administrators, if they interact with a manipulated request. Ampache users are urged to upgrade to version 7.0.1 to mitigate this risk, as no known workarounds for this vulnerability have been identified.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.