CVE-2024-54043: Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-54043?
CVE-2024-54043 is classified as a reflected Cross-Site Scripting vulnerability which poses a moderate security risk.
How do I fix CVE-2024-54043?
To fix CVE-2024-54043, you should upgrade Adobe Connect to version 12.7 or later, or ensure you are on version 11.4.9 or later.
Which versions of Adobe Connect are affected by CVE-2024-54043?
Adobe Connect versions 12.6, 11.4.7 and earlier are affected by CVE-2024-54043.
Can CVE-2024-54043 be exploited by unauthenticated users?
Yes, CVE-2024-54043 can be exploited by unauthenticated attackers if they convince a user to visit a malicious URL.
What type of attacks can result from CVE-2024-54043?
CVE-2024-54043 can allow attackers to execute malicious JavaScript in the context of the user's session on a vulnerable page.