Stored Cross-Site Scripting Vulnerability in ENOVIA Collaborative Industry Innovator

CVE-2024-12092

What is CVE-2024-12092?

CVE-2024-12092 is a serious stored Cross-site Scripting (XSS) vulnerability found in the ENOVIA Collaborative Industry Innovator platform, specifically in the Release 3DEXPERIENCE R2024x. This vulnerability allows attackers to inject and execute arbitrary scripts in the web browser sessions of users, potentially leading to unauthorized access to sensitive information and manipulation of web content. Organizations utilizing this version of the software are highly encouraged to apply security patches and implement robust security measures to mitigate the risks associated with this vulnerability.

References