CVE-2024-57279

Summary

CVE-2024-57279 is a newly identified Cross-Site Scripting (XSS) vulnerability that affects the LDAP User Manager version <= ce92321. The issue is located in the /setup/index.php endpoint, which fails to properly sanitize user-supplied data, specifically the returnto parameter. As a result, attackers can inject malicious JavaScript codes that can be reflected onto other users' browsers, potentially stealing sensitive information, conducting phishing attacks, or executing other malicious activities. This vulnerability poses a significant risk to organizations using the affected version of LDAP User Manager and requires immediate attention and patching.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.