CVE-2024-5712 — CSRF Vulnerability in stitionai/devika
A Cross-Site Request Forgery (CSRF) vulnerability was identified in the stitionai/devika application, affecting the latest version. This vulnerability allows attackers to perfor…
Published: 2024-06-28 · CVSS: 8.1 · CVSS 3.0
A Cross-Site Request Forgery (CSRF) vulnerability was identified in the stitionai/devika application, affecting the latest version. This vulnerability allows attackers to perform unauthorized actions in the context of a victim's browser, such as deleting projects or changing application settings, without any CSRF protection implemented. Successful exploitation disrupts the integrity and availability of the application and its data.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7