[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foxzUt-3cZm8PN76Xtz2ZiXC5iSgqbmFL4FM_qzAGNDc":3,"g5a-risk:CVE-2024-24819":114},{"success":4,"data":5,"meta":111},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":63,"weaknesses":64,"weaknessesCount":48,"isActivelyExploited":73,"cisaInfo":27,"otxData":27,"relatedBlogPosts":74,"seoMetadata":75,"configurations":100,"relatedVendorCves":109,"notableEvents":110},"CVE-2024-24819","What is CVE-2024-24819?","icingaweb2-module-incubator is a working project of bleeding edge Icinga Web 2 libraries. In affected versions the class `gipfl\\Web\\Form` is the base for various concrete form implementations [1] and provides protection against cross site request forgery (CSRF) by default. This is done by automatically adding an element with a CSRF token to any form, unless explicitly disabled, but even if enabled, the CSRF token (sent during a client's submission of a form relying on it) is not validated. This enables attackers to perform changes on behalf of a user which, unknowingly, interacts with a prepared link or website. The version 0.22.0 is available to remedy this issue. Users are advised to upgrade. There are no known workarounds for this vulnerability.","icingaweb2-module-incubator is a working project of bleeding edge Icinga Web 2 libraries. In affected versions the class `gipfl\\Web\\Form` is the base for var...","2024-02-09T01:15:10.08","2024-02-16T21:34:17.65",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":26,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,2.8,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":37,"ImpactScore":38},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":34,"AttackVector":21,"AttackComplexity":26,"PrivilegesRequired":26,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":26,"AvailabilityImpact":22,"BaseScore":35,"BaseSeverity":36,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":22,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:L\u002FI:H\u002FA:L",5.3,"MEDIUM",0.5,4.7,0.0026,[39,39,39,39,39,39,39],"High",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"icinga","icingaweb2-module-incubator","*","cpe:2.3:a:icinga:icingaweb2-module-incubator:*:*:*:*:*:*:*:*",1,[50,55,59],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fgithub.com\u002FIcinga\u002Ficingaweb2-module-incubator\u002Fcommit\u002Fdb7dc49585fee0b4e96be666d7f6009a74a1ccb5","GitHub",[54],"Patch",{"url":56,"source":52,"tags":57},"https:\u002F\u002Fgithub.com\u002FIcinga\u002Ficingaweb2-module-incubator\u002Fsecurity\u002Fadvisories\u002FGHSA-p8vv-9pqq-rm8p",[58],"Third Party Advisory",{"url":60,"source":52,"tags":61},"https:\u002F\u002Fgithub.com\u002Fsearch?q=gipfl%5CWeb%5CForm%3B&type=code",[62],"Permissions Required",3,[65],{"id":66,"name":67,"description":68,"extendedDescription":69,"status":70,"abstraction":71,"structure":72},"CWE-352","Cross-Site Request Forgery (CSRF)","The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.","When a web server is designed to receive a request from a client without any mechanism for verifying that it was intentionally sent, then it might be possible for an attacker to trick a client into making an unintentional request to the web server which will be treated as an authentic request. This can be done via a URL, image load, XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","Stable","Compound","Composite",false,[],{"title":76,"metaDescription":77,"keywords":78,"canonicalUrl":79,"structuredData":80},"What is CVE-2024-24819? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-24819, a high severity cyber security vulnerability from 2024. icingaweb2-module-incubator is a working project of bleedin...","CVE-2024-24819, CVE-2024-24819 vulnerability, CVE-2024-24819 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, icinga security, icingaweb2-module-incubator vulnerability","\u002Fwhat-is\u002Fcve-2024-24819",{"@context":81,"@type":82,"headline":76,"description":77,"datePublished":10,"dateModified":11,"author":83,"publisher":87,"about":91,"mainEntityOfPage":95,"articleSection":98,"keywords":99},"https:\u002F\u002Fschema.org","TechArticle",{"@type":84,"name":85,"url":86},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":84,"name":85,"url":86,"logo":88},{"@type":89,"url":90},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":92,"name":6,"description":93,"additionalType":94},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":96,"@id":97},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-24819","Cybersecurity","CVE-2024-24819, CVE-2024-24819 vulnerability, CVE-2024-24819 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[101],{"Operator":27,"Negate":27,"Nodes":102},[103],{"Operator":104,"Negate":27,"CPEMatch":105},"OR",[106],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":107,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":108,"VersionEndIncluding":27},"F22DD4AD-6817-437D-8273-295D28A389A3","0.22.0",[],[],{"lastModified":11,"cacheTime":112,"version":113},1793220814569,"2.0",{"score":115,"band":116,"action":117,"scoredAt":118},47,"Medium","Plan remediation","2026-07-01T10:31:54.324953+00:00"]