CVE-2024-53307

Summary

CVE-2024-53307 is a reflected cross-site scripting (XSS) vulnerability affecting Evisions MAPS v6.10.2.267. This issue lies in the /mw/ endpoint, enabling attackers to inject malicious code into a user's browser, potentially leading to data theft, session hijacking, or other forms of unauthorized access. By crafting a specially designed payload, an adversary can exploit this weakness and execute arbitrary code within the user's web context. This vulnerability poses a significant risk and requires urgent attention from MAPS users to apply the necessary security updates.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.