CVE-2024-12756

Summary

CVE-2024-12756 is a newly identified HTML Injection vulnerability affecting Avaya Spaces. This issue permits an attacker to potentially disclose sensitive information or manipulate the content displayed to users on the platform, posing a significant risk to data privacy and security. The vulnerability arises due to insufficient input validation, which allows malicious HTML code to be injected into pages, leading to unintended consequences. Avaya has released a patch to address this vulnerability, and users are strongly urged to apply it as soon as possible to mitigate potential risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.