CVE-2024-52951

Summary

CVE-2024-52951 is a stored Cross-Site Scripting (XSS) vulnerability affecting Omada Identity before version 15 update 1. An authenticated attacker can exploit this flaw by injecting malicious code into the Access Request History. This code is then executed in the browser of an unsuspecting victim, allowing the attacker to gain unauthorized access or steal sensitive information. The vulnerability can be exploited through a specially crafted link or by manipulating the Access Request History. This issue poses a serious threat to organizations using Omada Identity and highlights the importance of timely software updates to mitigate cybersecurity risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.