CVE-2024-52402

Summary

CVE-2024-52402 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Exclusive Content Password Protect feature in Cliconomics. Malicious actors can exploit this flaw to upload a web shell to a targeted web server, potentially gaining unauthorized access and control. Exposure extends from all unpatched versions of Exclusive Content Password Protect, ranging from the initial release to version 1.1.0.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.