CVE-2024-53484

Summary

CVE-2024-53484 is a newly identified privilege escalation vulnerability affecting Ever Traduora versions 0.20.0 and below. The issue arises due to the use of a hard-coded JSON Web Token (JWT) signing key, which can be exploited by attackers to gain elevated access to the system. This weakness enables unauthorized users to perform administrative actions and potentially gain control of the affected translation software. Users are strongly advised to update to the latest version of Ever Traduora as soon as possible to mitigate this risk. Failure to do so may expose systems and data to potential security breaches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.