CVE-2024-12664

Summary

CVE-2024-12664 is a recently disclosed vulnerability affecting the Project Task Comment Handler component in ruifang-tech Rebuild 3.8.5. This issue, classified as problematic, enables attackers to execute cross-site scripting (XSS) attacks. The manipulation can be initiated remotely, meaning an attacker does not require access to the victim's system. The vulnerability has been made public, increasing the risk of exploitation. Despite early notification from the security community, the vendor has not yet responded to address this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.