CVE-2024-54427

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Dec 16, 2024
CWE ID 352

Summary

CVE-2024-54430 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Bastien Ho EELV Newsletter. This issue enables an attacker to execute malicious actions on a user's account, by tricking them into clicking a specially crafted link. The flaw impacts EELV Newsletter versions from n/a through 4.8.2. Successful exploitation of this CSRF vulnerability could lead to unauthorized modifications or actions on the affected user's account.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share