Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2024-5712

CSRF Vulnerability in stitionai/devika

Description

A Cross-Site Request Forgery (CSRF) vulnerability was identified in the stitionai/devika application, affecting the latest version. This vulnerability allows attackers to perform unauthorized actions in the context of a victim's browser, such as deleting projects or changing application settings, without any CSRF protection implemented. Successful exploitation disrupts the integrity and availability of the application and its data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

stitionai stitionai/devika

  • unspecified to ≤ latestaffected

References