CVE-2024-37774

Publication date

2024-12-16 00:00:00

Family

mitre

State

PUBLISHED

Description

A Cross-Site Request Forgery (CSRF) in Sunbird DCIM dcTrack v9.1.2 allows authenticated attackers to escalate their privileges by forcing an Administrator user to perform sensitive requests in some admin screens.