CVE-2024-24777

A cross-site request forgery (CSRF) vulnerability exists in the Web Application functionality of the LevelOne WBR-6012 R0.40e6. A specially crafted HTTP request can lead to unauthorized access. An attacker can stage a malicious web page to trigger this vulnerability.

• CWE-352

• https://talosintelligence.com/vulnerability_reports/TALOS-2024-1981Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1981

Published

Oct 30, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-24771Open Forms allows users create and publish smart forms. Vers…5.9
• CVE-2024-24772A guest user could exploit a chart data REST API and send ar…4.3
• CVE-2024-24773Improper parsing of nested SQL statements on SQLLab would al…6.5
• CVE-2024-24774Mattermost Jira Plugin handling subscriptions fails to check…4.1
• CVE-2024-24775When a virtual server is enabled with VLAN group and SNAT li…7.5
• CVE-2024-24776Mattermost fails to check the required permissions in the PO…4.3
• CVE-2024-24778Improper privilege management in a REST interface allowed re…6.5
• CVE-2024-24779Apache Superset with custom roles that include `can write on…6.5
• CVE-2024-2478A vulnerability was found in BradWenqiang HR 2.0. It has bee…9.8
• CVE-2024-24780Remote Code Execution with untrusted URI of UDF vulnerabilit…9.8
• CVE-2024-24781An unauthenticated remote attacker can use an uncontrolled r…7.5
• CVE-2024-24782An unauthenticated attacker can send a ping request from one…4.3