CVE-2024-56299

Summary

CVE-2024-56299 is a Cross-site Scripting (XSS) vulnerability affecting Pektsekye Notify Odoo. This issue, which permits Stored XSS attacks, occurs due to improper neutralization of user input during web page generation. Affected versions of Notify Odoo range from n/a to 1.0.0. Successful exploitation of this vulnerability can lead to the injection of malicious scripts into web pages, potentially enabling attackers to steal sensitive user information or take control of user sessions. Users are advised to update their Notify Odoo installations as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.