CVE-2024-51322

Summary

CVE-2024-51322 is a Cross-Site Scripting (XSS) vulnerability affecting Zucchetti Ad Hoc Infinity 2.4. An authenticated attacker can exploit this weakness by injecting malicious scripts into specific components, including /jsp/home.jsp, /jsp/gsfr_feditorHTML.jsp, /servlet/SPVisualZoom, and /jsp/gsmd_container.js. Successful exploitation could lead to Remote Code Execution, resulting in significant security risks for organizations using this software. It is recommended that affected parties apply the necessary patches or upgrades to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.