CVE-2024-52943
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Nov 18, 2024
Updated: Dec 11, 2024
Summary
CVE-2024-52943 is a newly disclosed vulnerability affecting Veritas Enterprise Vault versions prior to 15.1 UPD882911. This issue, identified as ZDI-CAN-24697, enables an authenticated attacker to inject malicious parameters into HTTP requests while viewing archived content. The result is Cross-Site Scripting (XSS), allowing the attacker to execute malicious scripts in the user's browser. If the user is not appropriately sanitized before reflecting the script back, they could be adversely affected.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.