CVE-2024-24062

Summary

CVE-2024-24062 is a newly disclosed vulnerability affecting springboot-manager version 1.6. This vulnerability exposes the application to Cross-Site Scripting (XSS) attacks, which can allow an attacker to inject malicious scripts into a webpage viewed by other users. Specifically, the vulnerability can be exploited by manipulating the /sys/role endpoint. Successful exploitation may result in the execution of malicious scripts in the context of the targeted user, leading to potential data theft or unauthorized system access. It is therefore recommended that users of springboot-manager v1.6 upgrade to a patched version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.