CVE-2023-35774

Summary

CVE-2023-35774 is a Cross-Site Request Forgery (CSRF) vulnerability affecting versions older than 2.4.1 of the LWS Tools plugin. This issue allows an attacker to submit malicious requests on behalf of a user who has previously authenticated and interacted with the affected application. Successful exploitation could result in unintended actions being performed within the context of the vulnerable user, potentially leading to data theft or unauthorized system modifications. To mitigate this risk, users are advised to upgrade to the latest version of the LWS Tools plugin as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.