CVE-2024-55239

Summary

CVE-2024-55239 is a newly identified Cross-Site Scripting (XSS) vulnerability affecting Portabilis i-Educar 2.9. The flaw lies in the documentation upload functionality, which fails to properly sanitize user input in the 'titulo_documento' parameter. An attacker can exploit this weakness by crafting malicious URLs containing arbitrary JavaScript code. Successful exploitation could lead to unauthorized code execution in the user's browser, potentially resulting in data theft or account takeover. Users are strongly advised to update to a patched version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.