CVE-2024-6424

Summary

CVE-2024-6424 is a newly disclosed external server-side request vulnerability affecting MESbook's 20221021.03 version. This issue allows unauthenticated attackers to manipulate the endpoints "/api/Proxy/Post" and "/api/Proxy/Get" by providing malicious "userName," "password," and "uri" parameters. An attacker can exploit this weakness to read web files' source code, access internal files, or connect to network resources, posing a significant threat to the security of affected systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.