CVE-2024-35532

Summary

CVE-2024-35532 is an XML External Entity (XXE) injection vulnerability affecting Intersec Geosafe-ea versions 2022.12, 2022.13, and 2022.14. This issue enables attackers to read arbitrary files on the targeted system using the privileges of the running process. Moreover, they can execute Server Side Request Forgery (SSRF) attacks and trigger a Denial of Service (DoS) through unspecified vectors. This vulnerability poses significant risks and requires immediate patching to prevent potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.