CVE-2024-24060

Summary

CVE-2024-24060: A new vulnerability has been identified in springboot-manager version 1.6. This issue allows for Cross Site Scripting (XSS) attacks via the /sys/user endpoint, potentially enabling attackers to inject malicious scripts into web pages viewed by other users. Successful exploitation could lead to information disclosure or unauthorized actions on affected systems. Users are encouraged to update to a patched version of springboot-manager as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.