CVE-2024-42629
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Aug 12, 2024
Updated: Aug 13, 2024
CWE ID 352
Summary
CVE-2024-42629 is a newly identified vulnerability affecting FrogCMS version 0.9.5. This issue permits an attacker to execute malicious actions on a user's session through a Cross-Site Request Forgery (CSRF) attack, specifically on the /admin/?/page/edit/10 endpoint. Successful exploitation of this vulnerability could lead to unintended modifications or unauthorized actions within the affected FrogCMS installation. It is recommended that users promptly update their FrogCMS installations to a version that addresses this issue to mitigate potential risks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share