CVE-2024-0226
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Jan 9, 2024
Updated: Jan 12, 2024
CWE ID 79
CWE ID 20
Summary
CVE-2024-0226 is a stored cross-site scripting vulnerability affecting Synopsys Seeker before version 2023.12.0. Maliciously crafted payloads can be stored and executed in applications utilizing Synopsys Seeker, leading to potential hijacking of user sessions or theft of sensitive information. This issue poses a significant risk to organizations using the affected version of the software and emphasizes the importance of keeping software up-to-date to mitigate the threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.