CVE-2024-2134

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A vulnerability has been found in Bdtask Hospita AutoManager up to 20240223 and classified as problematic. This vulnerability affects unknown code of the file /investigation/delete/ of the component Investigation Report Handler. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-255496. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published
Mar 3, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-213404.6Windows Kernel Information Disclosure VulnerabilityCVE-2024-213416.8Windows Kernel Remote Code Execution VulnerabilityCVE-2024-213427.5Windows DNS Client Denial of Service VulnerabilityCVE-2024-213437.5Windows Network Address Translation (NAT) Denial of Service VulnerabilityCVE-2024-213445.9Windows Network Address Translation (NAT) Denial of Service VulnerabilityCVE-2024-213458.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2024-213467.8Win32k Elevation of Privilege VulnerabilityCVE-2024-213477.5Microsoft ODBC Driver Remote Code Execution VulnerabilityCVE-2024-213487.5Internet Connection Sharing (ICS) Denial of Service VulnerabilityCVE-2024-213498.8Microsoft ActiveX Data Objects Remote Code Execution VulnerabilityCVE-2024-21356.1A vulnerability was found in Bdtask Hospita AutoManager up to 20240223 and classified as problematic. This issue affects some unknown procesCVE-2024-213508.8Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-2134: Medium severity, CVSS 6.5 | Vulnix