CVE-2024-13142

Summary

CVE-2024-13142 is a newly identified vulnerability affecting ZeroWdd studentmanager 1.0. This issue lies in the RoleController.java file, specifically the submitAddRole function. A cross-site scripting (XSS) vulnerability is present, allowing attackers to inject malicious scripts into web pages viewed by other users. The exploit can be triggered remotely by manipulating the name argument. It is crucial that users update their software to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.