CVE-2024-53755

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Dec 2, 2024
CWE ID 352

Summary

CVE-2024-53755 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Andrea Pernici Third Party Cookie Eraser. An attacker can exploit this issue to perform Stored XSS (Cross-Site Scripting) attacks on unsuspecting users. This vulnerability exists in versions of the Third Party Cookie Eraser from n/a to 1.0.2. Successful exploitation could lead to the injection of malicious scripts, potentially resulting in data theft or unauthorized actions. Users are advised to upgrade to the latest version of the software to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share