CVE-2024-5712: CSRF Vulnerability in stitionai/devika

Severity: high (CVSS 8.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-06-28 · updated 2026-06-17
Weakness: CWE-352

Description

A Cross-Site Request Forgery (CSRF) vulnerability was identified in the stitionai/devika application, affecting the latest version. This vulnerability allows attackers to perform unauthorized actions in the context of a victim's browser, such as deleting projects or changing application settings, without any CSRF protection implemented. Successful exploitation disrupts the integrity and availability of the application and its data.

Affected products

stitionai/devika: 1.0

References

https://huntr.com/bounties/301aeafb-af28-4b0b-a2cf-9a2ff1da1ef4
https://huntr.com/bounties/301aeafb-af28-4b0b-a2cf-9a2ff1da1ef4

Get alerted when CVE-2024-5712 or the next vulnerability affects your stack