CVE-2024-12845
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Dec 20, 2024
Updated: Jan 7, 2025
CWE ID 94
CWE ID 79
Summary
CVE-2024-12845 is a newly disclosed vulnerability affecting Emlog Pro versions up to 2.4.1. This issue lies in the /include/lib/common.php library and stems from an unknown functionality. The vulnerability enables an attacker to execute cross-site scripting (XSS) attacks by manipulating the msg argument. This exploit can be launched remotely, increasing the risk for potential attacks. The exploit has been made public, making it essential for Emlog Pro users to apply the necessary patches as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Emlog
Affected Vendors
- EM Log