CVE-2024-43712

Summary

CVE-2024-43712 is a DOM-based Cross-Site Scripting (XSS) vulnerability affecting Adobe Experience Manager versions 6.5.21 and older. This issue stems from insufficient sanitization of user-controllable data used in the Document Object Model (DOM) of web pages, making it possible for attackers to inject and execute malicious scripts in users' browsers. Exploitation requires user interaction, such as visiting a specially crafted website or clicking a malicious link. Successful attacks could lead to the execution of arbitrary code in the context of the victim's browser.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.