CVE-2024-55009

Summary

CVE-2024-55009 is a reflected cross-site scripting (XSS) vulnerability affecting AutoBib, a bibliographic collection management system version 3.1.140 and older. This issue permits attackers to inject malicious Javascript code into the WCE=topFrame&WCU= parameter, which is executed in the context of a victim's browser, allowing potential data theft, session hijacking, or other malicious activities. Since this is a reflected XSS, the attack requires user interaction, typically through visiting a specially crafted link. Upgrading to the latest version of AutoBib is recommended to address this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.