CVE-2024-8215

Summary

CVE-2024-8215 is a critical Cross-site Scripting (XSS) vulnerability affecting various versions of Payara Server's Admin Console modules. This issue permits Remote Code Injection, allowing attackers to execute arbitrary malicious scripts on unsuspecting users. Specifically, the flaw lies in the improper neutralization of user input during web page generation. Affected versions include Payara Server from 5.20.0 to 5.67.99, 6.0.0 to 6.18.99, 6.2022.1 to 6.2024.9, and 4.1.2.191.1 to 4.1.2.191.50. Users are urged to update their servers to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.