CVE-2024-22290

Summary

CVE-2024-22290 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the AboZain,O7abeeb,UnitOne Custom Dashboard Widgets. This issue allows an attacker to execute Cross-Site Scripting (XSS) attacks on users of the affected widgets, which range from version n/a to 1.3.1. The CSRF flaw enables an attacker to manipulate users' actions on the affected website without their knowledge, potentially leading to unauthorized data access or modification. It's essential for users to update their Custom Dashboard Widgets to a patched version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.