CVE-2024-52840

Summary

CVE-2024-52840 is a DOM-based Cross-Site Scripting (XSS) vulnerability that affects Adobe Experience Manager versions 6.5.21 and earlier. This issue allows an attacker to inject malicious scripts into a victim's browser session by manipulating a DOM element through a crafted URL or user input. For the attack to be successful, the victim must access the manipulated URL or input the malicious data themselves. This vulnerability could potentially be exploited to execute arbitrary code in the victim's browser, posing a significant security risk. Adobe urges users to update to the latest version of their software to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.