CVE-2024-51859

Summary

CVE-2024-51859 is a Cross-site Scripting (XSS) vulnerability affecting Bamboo Enquiries from versions n/a through 1.9.3. Malicious actors can exploit this improper neutralization of input issue during web page generation and inject malicious scripts into a targeted user's browser session. The result can lead to stealing sensitive data or taking control of the user's account. Users are advised to upgrade to the latest version of Bamboo Enquiries to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.