CVE-2024-52943: XSS
An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24697. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Site Scripting (XSS) while viewing archived content. This could reflect back to an authenticated user without sanitization if executed by that user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-52943?
CVE-2024-52943 is considered a medium severity vulnerability due to its potential to exploit cross-site scripting in authenticated sessions.
How do I fix CVE-2024-52943?
To fix CVE-2024-52943, update Veritas Enterprise Vault to version 15.1 UPD882912 or later to mitigate the XSS vulnerability.
What kind of attack does CVE-2024-52943 allow?
CVE-2024-52943 allows an authenticated remote attacker to perform Cross-Site Scripting (XSS) attacks via specially crafted HTTP requests.
Who is affected by CVE-2024-52943?
CVE-2024-52943 affects users of Veritas Enterprise Vault versions prior to 15.1 UPD882911.
What are the consequences of CVE-2024-52943 exploitation?
The exploitation of CVE-2024-52943 can lead to unauthorized script execution within the context of an authenticated user session, compromising user data.