CVE-2024-51687

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Nov 14, 2024
Updated: Nov 15, 2024
CWE ID 352

Summary

CVE-2024-51687 is a newly disclosed vulnerability affecting the Platform.Ly Official platform. This issue involves a Cross-Site Request Forgery (CSRF) vulnerability that also allows Stored XSS attacks. The CSRF flaw enables an attacker to force a user to perform unintended actions on the Platform.Ly Official website, while the Stored XSS component allows an attacker to inject malicious code into web pages viewed by other users. These vulnerabilities pose a significant risk as they can lead to unauthorized actions and data compromise. Platform.Ly Official versions from n/a through 1.1.3 are reported to be susceptible to these issues.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share