VULNERABILITY INTELLIGENCE

CVE-2024-38293

CVSS score9.6 CRITICAL
EPSS probability0.35%
CISA KEVNot currently listed
Published2024-06-13
Last modified2026-06-17

Description

ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php.