CVE-2024-54045: Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-54045?
CVE-2024-54045 is classified as a reflected Cross-Site Scripting (XSS) vulnerability, which can allow attackers to execute malicious JavaScript.
How do I fix CVE-2024-54045?
To mitigate CVE-2024-54045, users should upgrade Adobe Connect to version 12.7 or later, or to 11.4.9 if on the 11.x series.
What versions of Adobe Connect are affected by CVE-2024-54045?
CVE-2024-54045 affects Adobe Connect versions 12.6 and 11.4.7 and earlier.
Can an unauthenticated attacker exploit CVE-2024-54045?
Yes, an unauthenticated attacker can exploit CVE-2024-54045 by convincing a victim to visit a specially crafted URL.
What kind of attacks can be performed using CVE-2024-54045?
Using CVE-2024-54045, attackers can execute arbitrary JavaScript in the context of an affected user's session, potentially leading to data theft or session hijacking.