CVE-2024-53779

Summary

CVE-2024-53779 is a newly disclosed vulnerability that impacts the Yahoo! WebPlayer, specifically versions from n/a to 2.0.6. This issue combines a Cross-Site Request Forgery (CSRF) and Stored Cross-Site Scripting (XSS) vulnerability. An attacker could exploit the CSRF flaw to force a user to perform unwanted actions on a web application in the context of the victim. Meanwhile, the Stored XSS vulnerability enables an attacker to inject malicious scripts into web pages, which can then be executed whenever the page is loaded by an unsuspecting user. The potential consequences of this vulnerability include data theft, account takeover, and other forms of unauthorized access or manipulation. Users are advised to update their Yahoo! WebPlayer to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.