CVE-2023-37650

Summary

CVE-2023-37650 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Admin portal of Cockpit CMS version 2.5.2. This issue allows attackers to manipulate vulnerable users into making unintended actions on the attacked website, leading to the execution of arbitrary Administrator commands. Successful exploitation of this vulnerability could result in significant data loss or unauthorized system modifications. Users of Cockpit CMS are urged to update to a patched version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.