CVE-2024-0011

Summary

CVE-2024-0011 is a reflected cross-site scripting (XSS) vulnerability affecting the Captive Portal feature of Palo Alto Networks PAN-OS software. This issue allows malicious JavaScript execution in the context of an authenticated user's browser if they click on a specially crafted link. An attacker could exploit this vulnerability to launch phishing attacks, potentially resulting in credential theft.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.