CVE-2024-38318

Summary

CVE-2024-38318 is a vulnerability affecting IBM Aspera Shares versions 1.9.0 through 1.10.0 PL6. This issue allows remote attackers to inject malicious HTML code into the system. If successfully exploited, the malicious code would be executed in the victim's Web browser, potentially leading to serious security consequences such as data theft or unauthorized access, as the code would run within the hosting site's security context. Users are strongly urged to update their IBM Aspera Shares software to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.