CVE-2024-51649

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Nov 19, 2024
CWE ID 352

Summary

CVE-2024-51649 is a newly disclosed vulnerability affecting Patrick Lumumba Mobilize, a software solution from an unknown version up to 3.0.7. The issue combines two security risks: Cross-Site Request Forgery (CSRF) and Stored Cross-Site Scripting (XSS). An attacker could exploit the CSRF vulnerability to force a user into performing unintended actions on a web application. Simultaneously, the Stored XSS vulnerability enables an attacker to inject malicious scripts into web pages viewed by other users. This combination of vulnerabilities poses a significant threat to the confidentiality, integrity, and availability of data handled by the affected software.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share