CVE-2024-55958
CVSS 3.1 Score 4.8 of 10 (medium)
Details
Published Jan 21, 2025
Updated: Jan 22, 2025
CWE ID 79
Summary
CVE-2024-55958 is a newly disclosed cross-site scripting (XSS) vulnerability affecting Northern.tech CFEngine Enterprise Mission Portal versions 3.24.0 and 3.21.5, and older. An attacker can exploit this issue to inject malicious scripts into web pages viewed by other users. Consequently, unintended execution of malicious code may occur resulting in potential data theft or unauthorized access. Users are advised to upgrade to the patched versions 3.24.1 and 3.21.6 as soon as possible to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.