CVE-2024-54047

Summary

CVE-2024-54047 is a newly disclosed Cross-Site Scripting (XSS) vulnerability impacting Adobe Connect versions 12.6 and 11.4.7, as well as older releases. This issue allows an attacker to inject malicious JavaScript code into a vulnerable page, which may be executed within the context of a victim's web browser. Successful exploitation occurs when a user visits a specially crafted URL. This vulnerability poses a significant risk to users, as it could lead to the theft of sensitive information, unauthorized system access, or other malicious activities. Users are strongly advised to update their Adobe Connect software to the latest version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.