CVE-2024-7709

Summary

CVE-2024-7709 is a recently disclosed vulnerability affecting the OcoMon 4.0RC1, 4.0, and 5.0RC1 versions. The issue lies within the component URL Handler's processing of the file /includes/common/require_access_recovery.php. A cross-site scripting (XSS) vulnerability has been identified, allowing an attacker to inject malicious scripts into a user's web browser. This attack can be initiated remotely, posing a significant security risk. To mitigate this issue, users are urged to upgrade to the patched versions 4.0.1 and 5.0 as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.