CVE-2024-54037

Summary

CVE-2024-54037 is a DOM-based Cross-Site Scripting (XSS) vulnerability affecting Adobe Connect versions 12.6 and 11.4.7, and possibly earlier. This issue allows an attacker to inject malicious scripts into a victim's browser session, which can be executed when the page is rendered. The exploitation of this vulnerability requires user interaction, meaning the victim must visit a malicious link or input data into a compromised form. The attacker could then gain control over the victim's browser, potentially stealing sensitive information or installing malware. Users are advised to update their Adobe Connect software as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.