← Database

CVE-2024-48849

CRITICAL CVSS: 9.4 Published: 2025-01-29 Modified: 2026-06-17

Description

Missing Origin Validation in WebSockets vulnerability in FLXEON. Session management was not sufficient to prevent unauthorized HTTPS requests. This issue affects FLXEON: through <= 9.3.4.

Affected Platforms

Unknown

Weakness Type

CWE-1385

References