CVE-2024-4657
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Sep 25, 2024
Updated: Sep 26, 2024
CWE ID 120
Summary
CVE-2024-4657 is a Cross-site Scripting (XSS) vulnerability affecting Talent Software's BAP Automation. The flaw, specifically an Improper Neutralization of Input During Web Page Generation issue, allows an attacker to inject malicious scripts into web pages viewed by other users. This stored XSS vulnerability poses a significant risk, as affected pages may be visited by numerous users, potentially leading to a large-scale attack. Users of BAP Automation versions before 30840 are urged to update immediately to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.