CVE-2024-52762

Summary

CVE-2024-52762 is a newly identified cross-site scripting (XSS) vulnerability that affects versions 3.73 to 3.76 of the Ganglia-web component, specifically the /master/header.php file. Malicious actors can exploit this issue by injecting a crafted payload into the "tz" parameter, enabling them to execute arbitrary web scripts or HTML code on vulnerable systems. Successful exploitation could lead to unauthorized access or data theft, underscoring the importance of patching affected installations promptly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.