CVE-2024-42489

Summary

CVE-2024-42489 is a remote code execution vulnerability affecting Pro Macros' Viewpdf macro in XWiki rendering. The issue stems from a lacking escaping mechanism, allowing users with minimal permissions on specific pages to execute arbitrary code. The impact extends to other macros like Viewppt, posing a significant threat. The affected version is resolved in 1.10.1.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.