CVE-2024-2134: Bdtask Hospita AutoManager Investigation Report cross-site request forgery
A vulnerability has been found in Bdtask Hospita AutoManager up to 20240223 and classified as problematic. This vulnerability affects unknown code of the file /investigation/delete/ of the component Investigation Report Handler. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-255496. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2134?
CVE-2024-2134 is classified as a problematic vulnerability due to its potential for cross-site request forgery.
How do I fix CVE-2024-2134?
To fix CVE-2024-2134, it is recommended to update Bdtask Hospita AutoManager to a version later than 20240223.
What impact does CVE-2024-2134 pose to users?
CVE-2024-2134 can allow malicious actors to perform unauthorized actions on behalf of users through cross-site request forgery.
What component is affected by CVE-2024-2134?
CVE-2024-2134 affects the Investigation Report Handler component in the affected software.
Which versions of Bdtask Hospita AutoManager are vulnerable to CVE-2024-2134?
Bdtask Hospita AutoManager versions up to and including 20240223 are vulnerable to CVE-2024-2134.