CVE-2024-56206
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Dec 31, 2024
CWE ID 352
Summary
CVE-2024-56206 is a newly disclosed Cross-Site Request Forgery (CSRF) vulnerability that impacts the Amarjeet Amar product, specifically the gap-hub-user-role component, from versions n/a through 3.4.1. An attacker could exploit this CSRF flaw to perform authentication bypass, gaining unauthorized access to user accounts. Users are strongly advised to update their systems to the latest patched version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.