[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foxzUt-3cZm8PN76Xtz2ZiXC5iSgqbmFL4FM_qzAGNDc":3,"g5a-risk:CVE-2024-24819":123},{"success":4,"data":5,"meta":120},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":42,"epssPercentile":29,"epssTimeSeries":43,"severity":44,"affectedProducts":45,"affectedProductsCount":51,"references":52,"referencesCount":72,"weaknesses":73,"weaknessesCount":51,"isActivelyExploited":82,"cisaInfo":29,"otxData":29,"relatedBlogPosts":83,"seoMetadata":84,"configurations":109,"relatedVendorCves":118,"notableEvents":119},"CVE-2024-24819","What is CVE-2024-24819?","icingaweb2-module-incubator is a working project of bleeding edge Icinga Web 2 libraries. In affected versions the class `gipfl\\Web\\Form` is the base for various concrete form implementations [1] and provides protection against cross site request forgery (CSRF) by default. This is done by automatically adding an element with a CSRF token to any form, unless explicitly disabled, but even if enabled, the CSRF token (sent during a client's submission of a form relying on it) is not validated. This enables attackers to perform changes on behalf of a user which, unknowingly, interacts with a prepared link or website. The version 0.22.0 is available to remedy this issue. Users are advised to upgrade. There are no known workarounds for this vulnerability.","icingaweb2-module-incubator is a working project of bleeding edge Icinga Web 2 libraries. In affected versions the class `gipfl\\Web\\Form` is the base for var...","2024-02-09T01:15:10.08","2026-06-17T07:14:57.03",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":39,"CVSSMetricV2":40,"CVSSMetricV40":41},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":23,"AvailabilityImpact":26,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:L\u002FI:H\u002FA:L","NETWORK","HIGH","REQUIRED","UNCHANGED","LOW",5.3,"MEDIUM",null,0.5,4.7,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":37,"ImpactScore":38},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":26,"PrivilegesRequired":36,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"NONE",2.8,5.9,[],[],[],0.0026,[42,42,42,42,42,42,42],"High",[46],{"vendor":47,"product":48,"version":49,"criteria":50,"vulnerable":4},"icinga","icingaweb2-module-incubator","*","cpe:2.3:a:icinga:icingaweb2-module-incubator:*:*:*:*:*:*:*:*",1,[53,58,62,66,68,70],{"url":54,"source":55,"tags":56},"https:\u002F\u002Fgithub.com\u002FIcinga\u002Ficingaweb2-module-incubator\u002Fcommit\u002Fdb7dc49585fee0b4e96be666d7f6009a74a1ccb5","GitHub",[57],"Patch",{"url":59,"source":55,"tags":60},"https:\u002F\u002Fgithub.com\u002FIcinga\u002Ficingaweb2-module-incubator\u002Fsecurity\u002Fadvisories\u002FGHSA-p8vv-9pqq-rm8p",[61],"Third Party Advisory",{"url":63,"source":55,"tags":64},"https:\u002F\u002Fgithub.com\u002Fsearch?q=gipfl%5CWeb%5CForm%3B&type=code",[65],"Permissions Required",{"url":54,"source":55,"tags":67},[57],{"url":59,"source":55,"tags":69},[61],{"url":63,"source":55,"tags":71},[65],6,[74],{"id":75,"name":76,"description":77,"extendedDescription":78,"status":79,"abstraction":80,"structure":81},"CWE-352","Cross-Site Request Forgery (CSRF)","The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.","When a web server is designed to receive a request from a client without any mechanism for verifying that it was intentionally sent, then it might be possible for an attacker to trick a client into making an unintentional request to the web server which will be treated as an authentic request. This can be done via a URL, image load, XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","Stable","Compound","Composite",false,[],{"title":85,"metaDescription":86,"keywords":87,"canonicalUrl":88,"structuredData":89},"What is CVE-2024-24819? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-24819, a high severity cyber security vulnerability from 2024. icingaweb2-module-incubator is a working project of bleedin...","CVE-2024-24819, CVE-2024-24819 vulnerability, CVE-2024-24819 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, icinga security, icingaweb2-module-incubator vulnerability","\u002Fwhat-is\u002Fcve-2024-24819",{"@context":90,"@type":91,"headline":85,"description":86,"datePublished":10,"dateModified":11,"author":92,"publisher":96,"about":100,"mainEntityOfPage":104,"articleSection":107,"keywords":108},"https:\u002F\u002Fschema.org","TechArticle",{"@type":93,"name":94,"url":95},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":93,"name":94,"url":95,"logo":97},{"@type":98,"url":99},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":101,"name":6,"description":102,"additionalType":103},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":105,"@id":106},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-24819","Cybersecurity","CVE-2024-24819, CVE-2024-24819 vulnerability, CVE-2024-24819 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[110],{"Operator":29,"Negate":29,"Nodes":111},[112],{"Operator":113,"Negate":82,"CPEMatch":114},"OR",[115],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":116,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":117,"VersionEndIncluding":29},"F22DD4AD-6817-437D-8273-295D28A389A3","0.22.0",[],[],{"lastModified":11,"cacheTime":121,"version":122},1792376242185,"2.0",{"score":124,"band":125,"action":126,"scoredAt":127},47,"Medium","Plan remediation","2026-10-16T07:00:47.247188+00:00"]