CVE-2024-56238

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Jan 2, 2025
CWE ID 862

Summary

CVE-2024-56238 is a new vulnerability affecting the QunatumCloud Floating Action Buttons. This issue involves a missing authorization check, allowing unauthorized access to functionality that is not adequately constrained by Access Control Lists (ACLs). This vulnerability affects Floating Action Button versions from n/a to 0.9.1. Successful exploitation of this flaw could result in unintended actions or data manipulation. Users are strongly encouraged to update to the latest version of the Floating Action Buttons to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share