PT-2024-24566 · Unknown · Codemenschen Gift Vouchers

Dhabaleshwar Das

·

CVE-2024-32436

·

Published

2024-04-15

·

Updated

2024-04-15

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions Codemenschen Gift Vouchers versions through 4.4.0
Description The issue is a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.
Recommendations For versions through 4.4.0, update to a version that includes a fix for this issue, as no specific workaround is provided in the available information.

Fix

CSRF

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2024-32436

Affected Products

Codemenschen Gift Vouchers