CVE-2024-51649

Summary

CVE-2024-51649 is a newly discovered vulnerability affecting Patrick Lumumba Mobilize, a software solution from an unknown version up to 3.0.7. This issue combines two serious threats: a Cross-Site Request Forgery (CSRF) vulnerability and Stored Cross-Site Scripting (XSS). An attacker exploiting the CSRF weakness can trick a user into performing unintended actions on a web application, while the Stored XSS component allows an attacker to inject malicious scripts into a web page, potentially stealing sensitive data or gaining unauthorized access.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.