CVE-2024-52357

Summary

CVE-2024-52357 is a newly disclosed Cross-Site Scripting (XSS) vulnerability affecting the LIQUID BLOCKS product developed by LIQUID DESIGN Ltd. The flaw, which allows Stored XSS attacks, resides in the web page generation process of the software. Attackers can inject malicious scripts into the affected system, potentially gaining the ability to steal user data or take unauthorized actions on their behalf. This vulnerability affects LIQUID BLOCKS versions from n/a through 1.2.0. Users are advised to apply the necessary patches or upgrades to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.