CVE-2023-36687

Summary

CVE-2023-36687 is a Cross-Site Request Forgery (CSRF) vulnerability affecting versions 5.8.2 and below of the Andrea Tarantini Menubar plugin. An attacker can exploit this flaw to force unintended actions from a user once they have been lured to a malicious website. The vulnerability allows the attacker to make unauthorized requests on behalf of the user, potentially leading to data theft or unauthorized modifications. Users are strongly encouraged to update their plugin to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.