CVE-2024-51649
CVSS 3.1 Score 7.1 of 10 (high)
Details
Summary
CVE-2024-51649 is a newly disclosed vulnerability affecting Patrick Lumumba Mobilize, a software solution from an unknown version up to 3.0.7. The issue combines two security risks: Cross-Site Request Forgery (CSRF) and Stored Cross-Site Scripting (XSS). An attacker could exploit the CSRF vulnerability to force a user into performing unintended actions on a web application. Simultaneously, the Stored XSS vulnerability enables an attacker to inject malicious scripts into web pages viewed by other users. This combination of vulnerabilities poses a significant threat to the confidentiality, integrity, and availability of data handled by the affected software.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.