CVE-2024-57372

Summary

CVE-2024-57372 is a newly disclosed Cross-Site Scripting (XSS) vulnerability. Hackers can exploit this flaw in the InformationPush master version to inject malicious scripts into web pages viewed by other users. By manipulating the title, time, and msg parameters, an attacker can steal sensitive information from unsuspecting victims. This vulnerability poses a significant risk to organizations that use InformationPush, as it enables unauthorized access to confidential data. To mitigate this threat, it's recommended that users immediately upgrade to the latest, secure version of the InformationPush software.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.