PT-2024-36782 · Redcap · Redcap

Published 2024-12-22 · Updated 2025-04-22 · CVE-2024-56311

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions REDCap versions 14.9.6 through 15.0.0

Description The issue is related to a security flaw in the Notes section of calendar events in REDCap, exposing users to a Cross-Site Request Forgery (CSRF) attack. An attacker can exploit this by luring users into accessing a calendar event's notes, which triggers a logout request and terminates their session. This vulnerability stems from the absence of CSRF protections on the logout functionality, allowing malicious actions to be executed without user consent.

Recommendations For REDCap versions 14.9.6 through 15.0.0, consider disabling access to the Notes section of calendar events until a patch is available. Restricting the use of the logout functionality may also help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2024-56311

Affected Products

Redcap

References · 12

• 🔥 https://github.com/ping-oui-no/Vulnerability-Research-CVESS/tree/main/RedCap · Exploit
• https://osv.dev/vulnerability/CVE-2024-56311 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-56311 · Security Note
• https://t.me/cvenotify/119385 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1870949494809870821 · Twitter Post
• https://twitter.com/CVEnew/status/1870943835909755024 · Twitter Post
• https://t.me/cvedetector/13514 · Telegram Post
• https://t.me/cvenotify/105347 · Telegram Post
• https://t.me/cvenotify/105255 · Telegram Post
• https://t.me/cvenotify/107010 · Telegram Post
• https://evms.edu/research/resources_services/redcap/redcap_change_log · Note
• https://twitter.com/cracbot/status/1872522844493819925 · Twitter Post