CVE-2024-25808: CSRF
Published Mar 22, 2024
·Updated
Cross-site Request Forgery (CSRF) vulnerability in Lychee version 3.1.6, allows remote attackers to execute arbitrary code via the create new album function.
Affected Software
2 affected components
Lycheeorg Lychee=3.1.6
Lychee Lychee
Event History
Mar 22, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-25808?
CVE-2024-25808 is classified as a high-severity vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2024-25808?
To mitigate CVE-2024-25808, update Lychee to the latest version where this vulnerability is patched.
3
What type of vulnerability is identified in CVE-2024-25808?
CVE-2024-25808 is a Cross-site Request Forgery (CSRF) vulnerability.
4
Who is affected by CVE-2024-25808?
Lychee users running version 3.1.6 are vulnerable to CVE-2024-25808.
5
What can attackers do exploiting CVE-2024-25808?
Exploiting CVE-2024-25808 allows attackers to execute arbitrary code through the create new album function.