CVE-2024-43984

podlove_podcast_publisher vulnerability - podlove

Critical CVSS Score: 9.6 Published: 2024-10-31

Description

Cross-Site Request Forgery (CSRF) vulnerability in Podlove Podlove Podcast Publisher allows Code Injection.This issue affects Podlove Podcast Publisher: from n/a through 4.1.13.

Affected Systems

Vendor podlove
Product podlove_podcast_publisher
Affected Versions before 4.1.14
CWE ID CWE-352

Mitigation

Apply the latest security patches from the vendor, restrict network exposure where applicable, and monitor for exploitation attempts.

Fix Instructions

Refer to the vendor advisory and apply the latest security updates. See references for detailed patching instructions.

References

Risk Assessment

CVSS: 9.6/10

Exploit Available Unknown
Patch Available Unknown

Need Help Patching?

Our security team can help assess and remediate this vulnerability in your environment.

Get Help

Stay Ahead of Threats

Subscribe to our vulnerability feed and get instant alerts when new CVEs affect your systems.

Start Monitoring