CVE-2024-34369

Summary

CVE-2024-34369 is a Cross-site Scripting (XSS) vulnerability affecting Webpushr's Web Push Notifications. The flaw, named Reflected XSS, permits an attacker to inject malicious scripts into Webpushr's web pages. This issue can potentially lead to unauthorized data access, session hijacking, or other malicious activities. Users of Webpushr versions from n/a to 4.35.0 are exposed to this risk. It is essential to apply the necessary security patches to mitigate this vulnerability and safeguard against potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.