CVE-2024-51640

Summary

CVE-2024-51640 is a newly disclosed vulnerability that affects the MDR Webmaster Tools, with versions from n/a through 1.1 being impacted. This issue combines two serious threats: Cross-Site Request Forgery (CSRF) and Stored Cross-Site Scripting (XSS). The CSRF weakness enables an attacker to issue malicious commands on behalf of an unsuspecting user, while the Stored XSS component allows an attacker to inject malicious scripts into web pages viewed by other users. These vulnerabilities, when exploited together, pose a significant risk to the security of the affected system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.