CVE-2024-51603

Summary

CVE-2024-51603 is a DOM-Based Cross-site Scripting (XSS) vulnerability affecting Mircea N. Strava activities, from an unspecified version through 1.0.6. Maliciously crafted user inputs during web page generation on NMR Strava activities can inject and execute malicious scripts in a victim's browser, leading to potential unauthorized access, data theft, or other malicious activities. This vulnerability can pose a serious threat to users, especially those who frequently interact with untrusted websites or links. It is highly recommended that users update to the latest version of the software to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.