CVE-2024-9075

Summary

CVE-2024-9075 is a vulnerability found in Stirling-Tools Stirling-PDF versions up to 0.28.3, specifically affecting the Markdown-to-PDF component, which can lead to cross-site scripting (XSS) attacks initiated remotely. While the complexity of exploitation is high and requires user interaction, the potential impact on an organization includes partial integrity compromise of their applications. To remediate this issue, users are advised to upgrade to version 0.29.0, where the problematic functionality has been removed permanently, with plans for future reimplementation once resolved. The vulnerability has a low base severity score of 2.6 and does not affect confidentiality or availability. Affected products include yxDrDS, yxEO8w, y02IaR, and y02IaS.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.