CVE-2023-45642

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Oct 16, 2023
Updated: Oct 19, 2023
CWE ID 352

Summary

CVE-2023-45642 identifies a Cross-Site Request Forgery (CSRF) vulnerability in the Hassan Ali Snap Pixel plugin version 1.5.7. This issue allows attackers to manipulate a user's browser into making unintended actions on a web application, by intercepting the user's session and executing malicious requests. Successful exploitation could result in unauthorized data changes or unauthorized access to protected resources. Users running affected versions of the Hassan Ali Snap Pixel plugin are advised to update to a patched version as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share