CVE-2024-54422

Summary

CVE-2024-54422 is a Cross-site Scripting (XSS) vulnerability affecting Gaowei Tang Evernote Sync. The flaw, which resides in the way input is neutralized during web page generation, can be exploited to inject malicious scripts into web pages. Successful attacks could lead to unauthorized access to user data or even take control of the affected user's Evernote account. This issue poses a significant risk, as it affects all versions of Evernote Sync from n/a through 3.0.0. Users are recommended to update to the latest version or apply relevant patches as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.