CVE-2024-56310

creationtimestamp| type| source ---|---|--- 2024-12-22 21:09:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113698522236702228 2024-12-22 21:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldwdkku5lm22 2024-12-22 23:06:21+00:00| seen|...

CVE-2024-56310

CVE-2024-56310 affects REDCap up to 14.9.6 and up to 15.0.0, due to missing CSRF protections on the Logout functionality. An attacker can lure a user to click a Project Dashboards name containing a payload, triggering a logout and terminating the user session. Root cause: CSRF protection absent o...

CVE-2024-56310

REDCap through 14.9.6 has a security flaw in the Project Dashboards name, exposing users to a Cross-Site Request Forgery CSRF attack. An attacker can exploit this by luring users into clicking on a Project Dashboards name that contains the malicious payload, which triggers a logout request and...