CVE-2023-51487

CVSS 3.1 Score 5.4 of 10 (medium)

Details

Published Mar 16, 2024
Updated: Mar 17, 2024
CWE ID 352

Summary

CVE-2023-51487 represents a Cross-Site Request Forgery (CSRF) vulnerability in ARI Soft ARI Stream Quiz. Affecting versions from n/a to 1.2.32, this issue allows malicious actors to manipulate users' actions within the application without their knowledge or consent. This can potentially lead to unauthorized modifications or even data exfiltration. Users are advised to update their ARI Stream Quiz installation to a patched version as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share