CVE-2024-55652

Summary

CVE-2024-55652 is a vulnerability affecting PenDoc, a penetration testing reporting application. Prior to the patch in commit 1d4219c596f4f518798492e48386a20c6e9a2fe6, an attacker could craft a malicious docx template with expressions that bypassed the JavaScript sandbox, allowing the execution of arbitrary code on the system. The vulnerability only affected users with administrative privileges who were able to create or update templates. The issue has since been addressed by the patch.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.