EUVD-2024-53101

Malicious code in bioql PyPI...

CVE-2024-56311

REDCap through 14.9.6 has a security flaw in the Notes section of calendar events, exposing users to a Cross-Site Request Forgery CSRF attack. An attacker can exploit this by luring users into accessing a calendar event's notes, which triggers a logout request and terminates their session. This...

PT-2024-36782 · Redcap · Redcap

Name of the Vulnerable Software and Affected Versions: REDCap versions 14.9.6 through 15.0.0 Description: The issue is related to a security flaw in the Notes section of calendar events in REDCap, exposing users to a Cross-Site Request Forgery CSRF attack. An attacker can exploit this by luring...

CVE-2024-56310

REDCap versions 14.9.6 and earlier (and versions up to 15.0.0 ) are vulnerable to a Cross-Site Request Forgery (CSRF) attack. The flaw originates from a lack of CSRF protections on the logout functionality within the Project Dashboards name . An attacker can exploit this by tricking a user into c...