CVE-2024-54041: Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

Q: What is the severity of CVE-2024-54041?

CVE-2024-54041 is classified as a moderate severity vulnerability due to its potential for stored XSS attacks.

Q: How do I fix CVE-2024-54041?

To fix CVE-2024-54041, update Adobe Connect to version 11.4.9 or later for 11.x, or to version 12.7 or later for 12.x.

Q: What type of vulnerability is CVE-2024-54041?

CVE-2024-54041 is a stored Cross-Site Scripting (XSS) vulnerability.

Q: What can attackers do with CVE-2024-54041?

Attackers can exploit CVE-2024-54041 to inject and execute malicious JavaScript in the browser of a victim.

Published Dec 10, 2024

Updated

Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.

Affected Software

2 affected components

Adobe Connect<11.4.9

Adobe Connect>=12.0<12.7

Event History

Dec 10, 2024

CVE Published

via MITRE·08:42 PM

Data Sourced

via MITRE·08:42 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-54041?

CVE-2024-54041 is classified as a moderate severity vulnerability due to its potential for stored XSS attacks.

How do I fix CVE-2024-54041?

To fix CVE-2024-54041, update Adobe Connect to version 11.4.9 or later for 11.x, or to version 12.7 or later for 12.x.

What type of vulnerability is CVE-2024-54041?

CVE-2024-54041 is a stored Cross-Site Scripting (XSS) vulnerability.

Which versions of Adobe Connect are affected by CVE-2024-54041?

Adobe Connect versions 12.6, 11.4.7 and earlier are affected by CVE-2024-54041.

What can attackers do with CVE-2024-54041?