CVE-2024-25155

Summary

CVE-2024-25155 is a vulnerability affecting FileCatalyst Direct versions 3.8.8 and earlier through 3.8.6. The issue lies in the web server's failure to sanitize illegal characters in a URL. An attacker can exploit this vulnerability by crafting a malicious URL, which, when displayed on an error page, would allow them to execute arbitrary code within an HTML script tag. This poses a significant security risk, as it could lead to unauthorized system access or data breaches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.