CVE-2024-8608

Summary

CVE-2024-8608 is a newly disclosed Cross-site Scripting (XSS) vulnerability affecting Oceanic Software's ValeApp. This issue, named Stored XSS, arises due to improper neutralization of user inputs during web page generation. The flaw allows attackers to inject malicious scripts into web pages viewed by other users. This vulnerability can lead to data theft, unauthorized account takeover, or even complete system compromise. The affected versions of ValeApp are those prior to v2.0.0. Users are advised to update their software as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.