CVE-2024-53710

Summary

CVE-2024-53710 is a newly disclosed Cross-Site Request Forgery (CSRF) vulnerability affecting ITERAS. This issue permits an attacker to submit unintended commands in the context of an unsuspecting user, potentially leading to unauthorized actions on the ITERAS platform. The CSRF vulnerability is compounded by a Stored Cross-Site Scripting (XSS) issue, which enables an attacker to inject malicious scripts into web pages viewed by other users. Affected versions of ITERAS range from n/a to 1.7.0. Users are strongly advised to apply the relevant patches or updates as soon as possible to mitigate these risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.