CVE-2024-9188

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Jan 10, 2025

Summary

CVE-2024-9188 is a newly disclosed vulnerability that allows an attacker to leak administrator tokens through specially crafted queries. By exploiting this cross-platform scripting vulnerability, an adversary can gain unauthorized access to administrative functionalities, potentially compromising the affected system or network. The precise cause of the issue remains undisclosed, but it is recommended that organizations apply the necessary patches or mitigations as soon as possible to protect against potential attacks. Successful exploitation of this vulnerability can lead to significant security implications, including data breaches and unauthorized system modifications.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share