CVE-2024-25417

Summary

CVE-2024-25417 is a newly disclosed vulnerability affecting flusity-CMS version 2.33. This issue permits an attacker to execute a Cross-Site Request Forgery (CSRF) attack through the /core/tools/add_translation.php component. Successful exploitation could allow the attacker to manipulate user actions on the affected website, leading to unintended data modifications or unauthorized access. Users are urged to update their flusity-CMS installations to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.