CVE-2024-25696

Summary

CVE-2024-25696 is a Cross-site Scripting (XSS) vulnerability affecting Portal for ArcGIS versions prior to 11.0. An attacker, given high-level access, can craft a malicious link that, when opened in the page editor, causes an image to render in the victim's browser. Upon accessing this image, the attacker can inject malicious code, potentially taking control of the user's session or stealing sensitive data. This issue poses a significant risk, and users are advised to upgrade to the latest version of Portal for ArcGIS as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.