AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-6662

UNKNOWN · CVSS N/A EPSS 0.28%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-01-10 · Last synced 2026-08-04

CyberRota Analysis

This vulnerability has an unknown severity rating. See the original NVD description below for full technical details.

CVE
CVE-2024-6662
Severity
UNKNOWN
CVSS
N/A
EPSS
0.28%

Original NVD Description

Websites managed by MegaBIP in versions below 5.15 are vulnerable to Cross-Site Request Forgery (CSRF) as the form available under "/edytor/index.php?id=7,7,0" lacks protection mechanisms. A user could be tricked into visiting a malicious website, which would send POST request to this endpoint. If the victim is a logged in administrator, this could lead to creation of new accounts and granting of administrative permissions.