Medium severity6.5NVD Advisory· Published Sep 10, 2024· Updated Jun 17, 2026

CVE-2024-45504

Description

Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow a remote unauthenticated attacker to hijack the authentication of the user and to perform unintended operations if the user views a malicious page while logged in.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Alps System Integration/Alps System Integration productsllm-create

Patches

Vulnerability mechanics

References

alsifaq.dga.jp/faq_detail.htmlnvd
jvn.jp/en/jp/JVN05579230/nvd
success.trendmicro.com/ja-JP/solution/KA-0017618nvd
www.motex.co.jp/news/notice/2024/release240909/nvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000