PT-2025-3434 · Unknown · Lifestylestore

·

CVE-2024-57373

·

Published

2025-01-27

·

Updated

2025-01-28

CVSS v3.1

8.1

High

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions LifestyleStore version 1.0
Description The issue allows a remote attacker to execute unauthorized actions on behalf of an authenticated user, potentially leading to account modifications or data compromise. This is due to a Cross Site Request Forgery issue, which may enable the attacker to execute arbitrary code and obtain sensitive information.
Recommendations LifestyleStore version 1.0: Update to a version that fixes the Cross Site Request Forgery issue to prevent remote attackers from executing arbitrary code and obtaining sensitive information.

Exploit

Fix

CSRF

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-57373

Affected Products

Lifestylestore