CVE-2024-56889

Summary

CVE-2024-56889 is a newly disclosed vulnerability affecting the CodeAstro Complaint Management System v1.0. The endpoint /admin/m_delete.php contains an access control error, enabling unauthorized attackers to delete arbitrary complaints by manipulating the id parameter. This issue poses a serious risk as it allows unauthenticated users to perform administrative actions that could lead to data loss or system compromise. Users are urged to update their systems to the latest patch or employ access control measures to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.