CVE-2024-54337
CVSS 3.1 Score 7.1 of 10 (high)
Details
Summary
CVE-2024-54337 is a newly disclosed vulnerability that puts users of the DevriX DX Dark Site at risk. This issue is a Cross-Site Request Forgery (CSRF) vulnerability, which allows attackers to submit malicious requests on behalf of a user who is currently authenticated on the site. Moreover, this flaw includes Stored Cross-Site Scripting (XSS), allowing attackers to inject malicious scripts into web pages that are later viewed by other users. The affected version range is from n/a to 1.0.1. Users are advised to apply patches or updates as soon as possible to mitigate these risks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.