A Cross-Site Request Forgery (CSRF) vulnerability was identified in the stitionai/devika application, affecting the latest version. This vulnerability allows attackers to perform unauthorized actions in the context of a victim's browser, such as deleting projects or changing application settings, without any CSRF protection implemented. Successful exploitation disrupts the integrity and availability of the application and its data.
References
Configurations
No configuration.
History
21 Nov 2024, 09:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://huntr.com/bounties/301aeafb-af28-4b0b-a2cf-9a2ff1da1ef4 - |
12 Jul 2024, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) A Cross-Site Request Forgery (CSRF) vulnerability was identified in the stitionai/devika application, affecting the latest version. This vulnerability allows attackers to perform unauthorized actions in the context of a victim's browser, such as deleting projects or changing application settings, without any CSRF protection implemented. Successful exploitation disrupts the integrity and availability of the application and its data. |
01 Jul 2024, 12:37
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-28 20:15
Updated : 2024-11-21 09:48
NVD link : CVE-2024-5712
Mitre link : CVE-2024-5712
CVE.ORG link : CVE-2024-5712
JSON object : View
Products Affected
No product.
CWE
CWE-352
Cross-Site Request Forgery (CSRF)