CVE-2024-25706

Summary

CVE-2024-25706 is a newly identified HTML injection vulnerability affecting Esri Portal for ArcGIS versions prior to 11.0. An attacker can exploit this vulnerability by crafting a malicious URL that, when clicked by an unsuspecting user, could lead them to an arbitrary website. This is significant as it could simplify phishing attacks, potentially resulting in data theft or system compromise, even without requiring authentication.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.