CVE-2024-2597

Summary

CVE-2024-2597 is a newly identified vulnerability affecting AMSS++ version 4.31. The issue lies in the application's failure to properly encode user-controlled input, leading to a Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw by crafting a malicious URL and sending it to an authenticated user. Successful exploitation could result in the attacker stealing the user's session cookie credentials, granting them unauthorized access to the affected system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.