CVE-2024-2479

Summary

CVE-2024-2479 is a newly disclosed cross-site scripting (XSS) vulnerability affecting MHA Sistemas arMHAzena 9.6.0.0. The flaw lies within the Cadastro Page component, where an argument named Query can be manipulated to launch the attack. This issue allows remote attackers to inject malicious code into a victim's browser, potentially stealing sensitive information or taking control of their account. The vulnerability, identified as VDB-256887, has been made public, increasing the risk of exploitation. Regrettably, the vendor did not respond to early notifications about this disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.