CVE-2024-45960
CVSS 3.1 Score 4.8 of 10 (medium)
Details
Published Oct 2, 2024
Updated: Oct 4, 2024
CWE ID 79
Summary
CVE-2024-45960 is a vulnerability affecting Zenario version 9.7.61188. This issue permits authenticated admin users to upload malicious PDF files into the system. If a user accesses such a file through the website, it can lead to a Cross Site Scripting (XSS) attack, potentially compromising the target system. This vulnerability poses a significant threat to websites running the affected Zenario version and should be addressed promptly through updates or patches.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Tribal Systems Zenario
Affected Vendors
- Tribal Systems