CVE-2024-41668
CVSS 3.1 Score 8.3 of 10 (high)
Details
Summary
CVE-2024-41668 is a vulnerability affecting the cBioPortal for Cancer Genomics, an open-source platform for visualizing, analyzing, and downloading large-scale cancer genomics data sets. This issue can potentially allow unauthenticated attackers to execute Server Side Request Forgery (SSRF) attacks on publicly exposed proxy endpoints. Users on private instances can also exploit this vulnerability while logged in. To address this issue, users are advised to upgrade to version 6.0.12. As a temporary solution, disabling the `/proxy` endpoint may prevent these attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.