CVE-2024-51644

Summary

CVE-2024-51644 is a newly disclosed vulnerability affecting the Sam Wilson Addressbook software. This issue combines two serious threats: Cross-Site Request Forgery (CSRF) and Stored Cross-Site Scripting (XSS). The CSRF vulnerability enables attackers to manipulate users' actions on a web application, while the Stored XSS component lets them inject malicious scripts into web pages viewed by other users. This vulnerability can be exploited by attackers to carry out various malicious activities, including data theft or session hijacking. The Addressbook software, from an unknown version through 1.1.3, is reportedly impacted by this issue. Users are strongly advised to apply the necessary patches or updates as soon as they become available to protect their systems from potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.