CVE-2024-53965

Summary

CVE-2024-53965 is a DOM-based Cross-Site Scripting (XSS) vulnerability affecting Adobe Experience Manager versions 6.5.21 and older. This issue allows a low privileged attacker to inject malicious scripts into a victim's browser session by manipulating a DOM element through a crafted URL or user input. The attacker can execute arbitrary code when the page is rendered, requiring user interaction for successful exploitation. This vulnerability poses a significant risk as it can lead to data theft, session hijacking, and other malicious activities. Users are advised to update their Adobe Experience Manager installations to the latest version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.