CVE-2024-56173

Summary

CVE-2024-56173 is a vulnerability affecting Optimizely Configured Commerce before version 5.2.2408. Malicious actors can exploit this issue by injecting malicious payloads into SVG documents, which can then be executed in users' browsers under specific conditions. This represents a Cross-Site Scripting (XSS) threat, allowing attackers to carry out various forms of code injection and data theft. Successful exploitation could lead to unauthorized access, session hijacking, or other malicious activities. Users are urged to update their Optimizely Configured Commerce installations to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.