CVE-2024-54160

Summary

CVE-2024-54160 is a newly disclosed vulnerability affecting dashboards-reporting, also known as Dashboards Reports, used in OpenSearch versions prior to 2.19. This issue permits Cross-Site Scripting (XSS) attacks due to insufficient sanitization of Markdown when displaying headers and footers in preview mode. An attacker can inject malicious scripts into these areas, potentially stealing user data or taking control of user sessions. Users are strongly advised to update their OpenSearch installations to version 2.19 or later to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.