CVE-2024-12211
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Jan 13, 2025
CWE ID 79
Summary
CVE-2024-12211 is a newly identified vulnerability affecting Pega Platform versions 8.1 to Infinity 24.2.0. This issue involves a Stored Cross-Site Scripting (XSS) weakness, specifically in the profile feature. Malicious actors can exploit this flaw to inject and execute malicious scripts on unsuspecting users' browsers, potentially leading to unauthorized data access or theft. The impact extends to any user interacting with the affected Pega Platform, necessitating immediate updates to mitigate the threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.