CVE-2024-23597

Cross-site request forgery (CSRF) vulnerability exists in TvRock 0.9t8a. If a logged-in user of TVRock accesses a specially crafted page, unintended operations may be performed. Note that the developer was unreachable, therefore, users should consider stop using TvRock 0.9t8a.

• CWE-352

• https://jvn.jp/en/jp/JVN24683352/
• https://jvn.jp/en/jp/JVN24683352/

Published

May 1, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-23590Session Fixation vulnerability in Apache Kylin. This issue …9.1
• CVE-2024-23591ThinkSystem SR670V2 servers manufactured from approximately …2.3
• CVE-2024-23592An authentication bypass vulnerability was reported in Lenov…6.3
• CVE-2024-23593 A vulnerability was reported in a system recovery bootload…6.7
• CVE-2024-23594 A buffer overflow vulnerability was reported in a system r…6.4
• CVE-2024-23595Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-23599Race condition in Seamless Firmware Updates for some Intel(R…8.3
• CVE-2024-2360parisneo/lollms-webui is vulnerable to path traversal attack…9.8
• CVE-2024-23600Improper Input Validation of query search results for privat…2.7
• CVE-2024-23601A code injection vulnerability exists in the scan_lib.bin fu…9.8
• CVE-2024-23603 An SQL injection vulnerability exists in an undisclosed pag…3.8
• CVE-2024-23604Cross-site scripting vulnerability exists in FitNesse all re…6.1