CVE-2024-54352
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Dec 16, 2024
CWE ID 352
Summary
CVE-2024-54352 is a newly disclosed Cross-Site Request Forgery (CSRF) vulnerability affecting the Sabri Taieb Sogrid software, from an undisclosed version through 1.5.2. An attacker could exploit this CSRF weakness to perform unauthorized actions with elevated privileges. The vulnerability enables an attacker to trick a user into making a malicious request, potentially leading to significant security implications. It is crucial for users to apply the necessary patches or updates as soon as they become available to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share