CVE-2023-48772
CVSS 3.1 Score 8.8 of 10 (high)
Details
Summary
CVE-2023-48772 is a Cross-Site Request Forgery (CSRF) vulnerability that has been identified in Arul Prasad J Prevent Landscape Rotation. Affecting versions from n/a to 2.0, this issue allows an attacker to execute malicious actions on a victim's behalf, potentially leading to unauthorized changes in the victim's Prevent Landscape Rotation configuration. This vulnerability can pose a significant security risk, particularly in environments where user sessions are not properly protected or where sensitive data is being managed. To mitigate this issue, affected users are advised to apply the latest security patch or implement CSRF tokens in their application to prevent unauthorized requests.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.