CVE-2024-46079

Summary

CVE-2024-46079 is a newly disclosed vulnerability that impacts Scriptcase versions 9.10.023 and older. The weakness lies in the proj_new.php file, which fails to adequately sanitize user input in the Descricao parameter. This oversight allows for Cross Site Scripting (XSS) attacks, enabling malicious actors to inject malicious scripts into a victim's web browser, potentially leading to privacy violations, data theft, or even system takeover. Users are strongly advised to upgrade to the latest version of Scriptcase, or consider implementing input validation measures to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.