CVE-2024-21984

Summary

CVE-2024-21984 is a vulnerability found in StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8. This vulnerability is classified as a Reflected Cross-Site Scripting (XSS) vulnerability that can be difficult to exploit. To successfully exploit this vulnerability, the attacker must have specific information about the target instance and trick a privileged user into clicking a specially crafted link. If successful, the attacker could potentially view or modify configuration settings, as well as add or modify user accounts. The base severity of this vulnerability is considered medium, with an impact score of 4.2 out of 10. It requires network access and user interaction, but does not require any privileges from the attacker. The confidentiality impact is low, while the integrity impact is high. The vulnerability has no availability impact and can be remediated by updating StorageGRID to version 11.8 or newer.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.