CVE-2024-56924: CSRF

Published Jan 22, 2025

Updated

A Cross Site Request Forgery (CSRF) vulnerability in Code Astro Internet banking system 2.0.0 allows remote attackers to execute arbitrary JavaScript on the admin page (pagesaccount), potentially leading to unauthorized actions such as changing account settings or stealing sensitive user information. This vulnerability occurs due to improper validation of user requests, which enables attackers to exploit the system by tricking the admin user into executing malicious scripts.

Affected Software

2 affected components

Code Astro Internet Banking System

Codeastro Internet Banking System=2.0.0

Event History

Jan 22, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-56924?

CVE-2024-56924 is classified as a high severity vulnerability due to its potential for unauthorized actions and data theft.

How can I fix CVE-2024-56924?

To fix CVE-2024-56924, ensure that you implement CSRF tokens in forms to validate requests and restrict sensitive actions on the admin page.

What type of attack does CVE-2024-56924 enable?

CVE-2024-56924 enables Cross Site Request Forgery (CSRF) attacks, allowing attackers to execute arbitrary JavaScript on the admin page.

Which software is affected by CVE-2024-56924?

CVE-2024-56924 affects the Code Astro Internet Banking System version 2.0.0.

What can attackers do exploiting CVE-2024-56924?

Exploiting CVE-2024-56924, attackers can change account settings or steal sensitive user information.