CVE-2024-51654

Summary

CVE-2024-51654 is a newly disclosed Cross-Site Request Forgery (CSRF) vulnerability affecting APK.Support APK Downloader. An attacker exploiting this flaw can conduct Stored XSS (Cross-Site Scripting) attacks on unsuspecting users. Successful exploitation could lead to unauthorized actions being performed on the victim's behalf, such as account takeover or data theft. The vulnerability exists in APK Downloader versions from n/a through 1.0.0. Users are advised to update to a patched version or avoid downloading APK files using this application until a fix is available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.