What is the CVSS score of CVE-2024-56924?

CVE-2024-56924 has a CVSS 3.1 base score of 7.3 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.1%.

Which versions of Internet Banking System are affected by CVE-2024-56924?

CVE-2024-56924 presents moderate security risk, a cross-site request forgery vulnerability rated CVSS 7.3.

Is there a public PoC exploit available for CVE-2024-56924?

Yes, a public proof-of-concept exploit is available for CVE-2024-56924. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2024-56924?

Within 30 days: Identify all affected systems and apply vendor patches as part of regular patch cycle. Verify anti-CSRF tokens and content security policies are enforced.

Internet Banking System CVE-2024-56924

HIGH

Cross-Site Request Forgery (CSRF) (CWE-352)

2025-01-22 cve@mitre.org

CSRF Internet Banking System Codeastro

7.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.3 HIGH

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 18:05 vuln.today

PoC Detected

Aug 04, 2025 - 15:08 vuln.today

Public exploit code

CVE Published

Jan 22, 2025 - 21:15 nvd

HIGH 7.3

DescriptionCVE.org

A Cross Site Request Forgery (CSRF) vulnerability in Code Astro Internet banking system 2.0.0 allows remote attackers to execute arbitrary JavaScript on the admin page (pages_account), potentially leading to unauthorized actions such as changing account settings or stealing sensitive user information. This vulnerability occurs due to improper validation of user requests, which enables attackers to exploit the system by tricking the admin user into executing malicious scripts.

AnalysisAI

A Cross Site Request Forgery (CSRF) vulnerability in Code Astro Internet banking system 2.0.0 allows remote attackers to execute arbitrary JavaScript on the admin page (pages_account), potentially. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Cross-Site Request Forgery (CSRF) (CWE-352), which allows attackers to trick authenticated users into performing unintended actions. A Cross Site Request Forgery (CSRF) vulnerability in Code Astro Internet banking system 2.0.0 allows remote attackers to execute arbitrary JavaScript on the admin page (pages_account), potentially leading to unauthorized actions such as changing account settings or stealing sensitive user information. This vulnerability occurs due to improper validation of user requests, which enables attackers to exploit the system by tricking the admin user into executing malicious scripts. Affected products include: Codeastro Internet Banking System.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement anti-CSRF tokens, validate Origin/Referer headers, use SameSite cookie attribute.