← CVE Intelligence

CVE-2024-5712

CSRF Vulnerability in stitionai/devika PUBLISHED

Description (CNA)

A Cross-Site Request Forgery (CSRF) vulnerability was identified in the stitionai/devika application, affecting the latest version. This vulnerability allows attackers to perform unauthorized actions in the context of a victim's browser, such as deleting projects or changing application settings, without any CSRF protection implemented. Successful exploitation disrupts the integrity and availability of the application and its data.

Affected (CNA)

Vendor / productVersions
stitionai / stitionai/devikaaffected unspecified through latest

CWE

CWE-352

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.