EUVD-2024-53101

Malicious code in bioql PyPI...

PT-2024-36782 · Redcap · Redcap

Name of the Vulnerable Software and Affected Versions: REDCap versions 14.9.6 through 15.0.0 Description: The issue is related to a security flaw in the Notes section of calendar events in REDCap, exposing users to a Cross-Site Request Forgery CSRF attack. An attacker can exploit this by luring...

CVE-2024-56310

The REDCap data collection and management web application (versions 14.9.6 and earlier , and up to 15.0.0 ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to missing protections on the logout functionality. An attacker can trick a user into clicking a Project Dashboards name cont...

CVE-2024-56311

REDCap through 14.9.6 has a security flaw in the Notes section of calendar events, exposing users to a Cross-Site Request Forgery CSRF attack. An attacker can exploit this by luring users into accessing a calendar event's notes, which triggers a logout request and terminates their session. This...