CVE-2024-5888

Summary

CVE-2024-5888 is a stored Cross-site Scripting (XSS) vulnerability affecting ArcGIS Server versions 10.9.1 to 11.3. This issue enables a remote, authenticated attacker to create crafted links, which if clicked, can execute arbitrary JavaScript code in the victim's browser. The attacker requires publisher capabilities to exploit this vulnerability. The impact of this vulnerability on confidentiality and integrity is considered low, as the attacker cannot directly modify data or access sensitive information. However, no impact on availability is reported.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.