CVE-2024-56376: XSS
A stored cross-site scripting (XSS) vulnerability in the built-in messenger of REDCap 14.9.6 allows authenticated users to inject malicious scripts into the message field. When a user click on the received message, the crafted payload is executed, potentially enabling the execution of arbitrary web scripts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56376?
CVE-2024-56376 has a high severity rating due to its potential to allow the execution of arbitrary scripts.
How do I fix CVE-2024-56376?
To fix CVE-2024-56376, update REDCap to the latest version that addresses this vulnerability.
Who is affected by CVE-2024-56376?
Authenticated users of REDCap version 14.9.6 are at risk of exploitation from CVE-2024-56376.
What types of attacks can CVE-2024-56376 enable?
CVE-2024-56376 can enable stored cross-site scripting (XSS) attacks, allowing malicious scripts to run in the context of the user.
Can CVE-2024-56376 be exploited remotely?
Yes, CVE-2024-56376 can be exploited remotely by sending crafted messages containing malicious scripts to users.