CVE-2024-9847

Summary

CVE-2024-9847 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the latest version of FlatPress Content Management System (CMS). This issue allows attackers to manipulate authenticated users into executing malicious requests on their behalf. By crafting a malicious link or script, an attacker can enable or disable plugins on the victim user's account, effectively performing unauthorized actions on the server. Since the requests are authenticated, the server processes them as legitimate user actions. FlatPress CMS has released version 1.4.dev as a fix for this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.