CVE-2024-55279
CVSS 3.1 Score 6 of 10 (medium)
Details
Summary
CVE-2024-55279 is a newly disclosed vulnerability affecting Uguu, a software component, version 1.8.9 and below. This issue permits Cross-Site Scripting (XSS) attacks through maliciously crafted JavaScript code embedded in XML files. Successful exploitation of this vulnerability could lead to unintended execution of malicious scripts in a user's web browser. Attackers may use this to steal sensitive data or perform unauthorized actions on the affected system. To mitigate the risk, users are encouraged to update their Uguu software to the latest version as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.