CVE-2024-43733

Summary

CVE-2024-43733 is a DOM-based Cross-Site Scripting (XSS) vulnerability affecting Adobe Experience Manager versions 6.5.21 and prior. This issue allows an attacker to inject malicious scripts into a victim's browser session by manipulating a DOM element, either through a crafted URL or user input. Successful exploitation requires user interaction, meaning the victim must visit a malicious link or input data into a compromised form. By executing these scripts, the attacker could gain control over the victim's browser and potentially steal sensitive information or install malware.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.