CVE-2024-11846
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Jan 1, 2025
Updated: Jan 2, 2025
Summary
CVE-2024-11846 is a Reflected Cross-Site Scripting (XSS) vulnerability. This issue stems from the application's failure to sanitize and escape a user parameter before rendering it on the page. An attacker can exploit this flaw by injecting malicious scripts into the input, causing the scripts to be executed in the context of the affected user, potentially gaining unauthorized access or stealing sensitive information, particularly from high-privilege users like administrators.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.