CVE-2024-52583

Summary

CVE-2024-52583: The WesHacks GitHub repository, which hosts the source code for the Muweilah Wesgreen Hackathon's official website, contained a vulnerability in the `schedule.html` page before November 17, 2024, or commit 93dfb83. This issue allowed the loading of malicious JavaScript files from `Leostop`, a potentially malicious site. The exact nature of `Leostop` is unclear, but it's suspected to be a tracking malware that creates two JavaScript files. The WesHacks team removed all references to `Leostop` from their website on November 17, 2024.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.