CVE-2024-29890

Summary

CVE-2024-29890 affects the DataLens business intelligence system, where a vulnerability was discovered allowing the execution of custom JavaScript code in an unprotected sandbox through a specifically crafted chart request. This issue, now resolved in version 0.1449.0, can be mitigated by restricting access to the API for creating or modifying charts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.