CVE-2024-43481
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Oct 8, 2024
Updated: Oct 16, 2024
CWE ID 79
Summary
CVE-2024-43481 is a new vulnerability affecting Power BI Report Server. Hackers can exploit this spoofing weakness to manipulate URLs and trick users into opening malicious reports, potentially leading to unintended actions or exposure of sensitive data. The flaw exists due to insufficient input validation, allowing attackers to craft deceptive URLs that mimic legitimate ones. Microsoft urges users to apply the forthcoming patch as soon as it becomes available to protect against this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.