CVE-2024-4336

Summary

CVE-2024-4336 introduces a persistent Cross-Site Scripting (XSS) vulnerability in Adive Framework 2.0.8. This issue stems from insufficient encoding of user-controlled inputs in the /adive/admin/tables/add endpoint, affecting multiple parameters. An attacker can exploit this flaw to inject malicious scripts and retrieve the session details of authenticated users, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.