CVE-2024-5712

A Cross-Site Request Forgery (CSRF) vulnerability was identified in the stitionai/devika application, affecting the latest version. This vulnerability allows attackers to perform unauthorized actions in the context of a victim's browser, such as deleting projects or changing application settings, without any CSRF protection implemented. Successful exploitation disrupts the integrity and availability of the application and its data.

• CWE-352

• https://huntr.com/bounties/301aeafb-af28-4b0b-a2cf-9a2ff1da1ef4Exploit, Third Party Advisory
• https://huntr.com/bounties/301aeafb-af28-4b0b-a2cf-9a2ff1da1ef4Exploit, Third Party Advisory

Published

Jun 28, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-57096An issue in wps office before v.19302 allows a local attacke…5.5
• CVE-2024-57097ClassCMS 4.8 is vulnerable to Cross Site Scripting (XSS) in …4.8
• CVE-2024-57098Moss v0.1.3 version has an SQL injection vulnerability that …9.8
• CVE-2024-57099ClassCMS v4.8 has a code execution vulnerability. Attackers …9.8
• CVE-2024-5710berriai/litellm version 1.34.34 is vulnerable to improper ac…6.5
• CVE-2024-5711A stored Cross-Site Scripting (XSS) vulnerability exists in …6.1
• CVE-2024-5713The If-So Dynamic Content Personalization WordPress plugin b…5.4
• CVE-2024-5714In lunary-ai/lunary version 1.2.4, an improper access contro…6.8
• CVE-2024-5715The wp-eMember WordPress plugin before 10.6.7 does not sanit…7.1
• CVE-2024-57151SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and b…6.8
• CVE-2024-57152Incorrect access control in the preHandle function of my-sit…7.5
• CVE-2024-57154Incorrect access control in dts-shop v0.0.1-SNAPSHOT allows …9.8