CVE-2024-56229
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Dec 31, 2024
CWE ID 352
Summary
CVE-2024-56229 is a Cross-Site Request Forgery (CSRF) vulnerability affecting SearchIQ, version n/a through 4.6. A CSRF attack tricks a user into making unintended actions on a web application in their own name. In this case, an attacker could exploit the vulnerability to perform unauthorized actions on behalf of an authenticated user, such as modifying their account settings or making unintended purchases. Users are advised to update their SearchIQ installation to the latest version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.