CVE-2024-0718

Summary

CVE-2024-0718 is a newly reported vulnerability affecting the liuwy-dlsdys zhglxt 4.7.7 component's HTTP POST Request Handler. This issue, classified as problematic, arises due to insufficient input validation when processing the /oa/notify/edit file. An attacker can exploit this cross-site scripting (XSS) vulnerability by manipulating the notifyTitle argument and initiate the attack remotely. The exploit for this vulnerability, identified as VDB-251543, has been disclosed to the public, posing a significant risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.