CVE-2024-0010

Summary

CVE-2024-0010 is a reflected cross-site scripting (XSS) vulnerability affecting the GlobalProtect portal feature of Palo Alto Networks PAN-OS software. Malicious JavaScript code can be executed in users' browsers if they click on a specially crafted link, making way for phishing attacks that potentially result in credential theft. This issue could pose a significant risk if exploited, emphasizing the importance of applying relevant software patches promptly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.