CVE-2024-51637

Summary

CVE-2024-51637 is a newly discovered Cross-Site Request Forgery (CSRF) vulnerability affecting the Admin SMS Alert software version 1.1.0 and below. An attacker can exploit this weakness to execute a Stored Cross-Site Scripting (XSS) attack on unsuspecting users. The CSRF vulnerability allows an attacker to induce the victim's browser to send unintended commands to the server on behalf of the victim, while the Stored XSS component enables the attacker to inject malicious scripts into the server's response, potentially resulting in significant data theft or account takeover. Users are advised to update their Admin SMS Alert software immediately to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.