CVE-2024-7169
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Jul 28, 2024
Updated: Aug 12, 2024
CWE ID 352
Summary
CVE-2024-7169 is a newly disclosed vulnerability affecting the SourceCodester School Fees Payment System 1.0. An unknown part of the file /ajax.php contains a problematic issue that allows for cross-site request forgery (CSRF). An attacker can remotely initiate this vulnerability, potentially leading to unauthorized actions. The exploit for this vulnerability, identified as VDB-272583, has been made public, increasing the risk for potential attacks. Users of this system are urged to apply updates as soon as possible to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.