CVE-2024-43723

Summary

CVE-2024-43723 is a DOM-based Cross-Site Scripting (XSS) vulnerability that affects Adobe Experience Manager versions 6.5.21 and older. This issue allows an attacker to inject malicious scripts into a victim's browser session by manipulating a DOM element through a crafted URL or user input. Successful exploitation requires user interaction, meaning the victim must visit a malicious link or page. The attacker can then execute arbitrary code in the context of the victim's browser session. This vulnerability poses a significant risk to users who visit untrusted websites or click on malicious links. Adobe strongly advises users to upgrade to a patched version of Adobe Experience Manager to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.