CVE-2024-52838

Summary

CVE-2024-52838 is a DOM-based Cross-Site Scripting (XSS) vulnerability affecting Adobe Experience Manager versions 6.5.21 and prior. An attacker can exploit this bug by manipulating a DOM element via a maliciously crafted URL or user input. Successful exploitation allows the attacker to inject malicious scripts, which execute in the victim's browser session when the page is rendered. This type of attack necessitates user interaction, with victims needing to visit a malicious link or input data into a compromised form.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.