CVE-2024-51669
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Nov 19, 2024
Updated: Nov 25, 2024
CWE ID 352
Summary
CVE-2024-51669 is a Cross-Site Request Forgery (CSRF) vulnerability that impacts Vivwebs Dynamic Widgets. Affected versions range from n/a to 1.6.4. This issue allows malicious actors to manipulate user actions by forging requests on their behalf. The impact could result in unintended data modification or unauthorized access to sensitive information. Users are advised to update their Dynamic Widgets installation to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share