CVE-2024-56525

Summary

CVE-2024-56525 is a vulnerability affecting the Public Knowledge Project's Open Journal Systems (OJS), Open Monograph Press (OMP), and Open Publication Services (OPS) before versions 3.3.0.21 and 3.4.x before 3.4.0.8. A successful XXE (XML External Entity) attack by the Journal Editor Role can exploit this weakness to create a new super admin role within the journal context and install a backdoor plugin by uploading a specially crafted XML document as a User XML Plugin. This vulnerability poses a significant risk to the security and integrity of data managed through these systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.