CVE-2024-51643

Summary

CVE-2024-51643 is a newly disclosed vulnerability affecting the Amazon Associate Filter, specifically versions from n/a to 0.4. This issue combines two threats: Cross-Site Request Forgery (CSRF) and Stored Cross-Site Scripting (XSS). The CSRF vulnerability allows an attacker to force a user into performing unwanted actions on a web application, while the Stored XSS vulnerability enables an attacker to inject malicious scripts into web pages viewed by other users. Successful exploitation of these vulnerabilities could result in unauthorized actions or data exfiltration.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.