CVE-2024-56508

Summary

CVE-2024-56508 is a file upload vulnerability affecting the LinkAce self-hosted archive software. The issue is located in the "Import Bookmarks" functionality, which prior to version 1.15.6, fails to adequately sanitize user-uploaded files. Malicious HTML files containing JavaScript payloads can be uploaded, leading to reflected or persistent cross-site scripting (XSS) attacks. These attacks can execute when the uploaded links are accessed, potentially compromising user data or allowing unauthorized access to the system. This vulnerability has been addressed in version 1.15.6.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.