CVE-2024-52452

Summary

CVE-2024-52452 is a Cross-Site Scripting (XSS) vulnerability affecting the eduNEXT Open edX Learning Management System (LMS), from an unspecified version up to 2.6.1. Malicious actors can exploit this issue by injecting malicious scripts into web pages generated by the system, potentially stealing user data or taking control of user sessions. This could lead to unauthorized access, data theft, or other malicious activities. The vulnerability stems from improper neutralization of user input, allowing attackers to inject and execute their own scripts within the context of the affected website. Users are strongly advised to upgrade to a patched version as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.