Stored Cross-site Scripting Vulnerability in ArcGIS Server by Esri

CVE-2024-51956

What is CVE-2024-51956?

A stored Cross-site Scripting (XSS) vulnerability exists in ArcGIS Server versions 10.9.1 through 11.3, enabling an authenticated remote attacker with publisher capabilities to craft a malicious link. When this link is accessed by a victim, it can execute arbitrary JavaScript within their browser. Despite the elevated privileges needed to exploit this vulnerability, the potential impact on confidentiality and integrity is noted to be minimal, with no effect on system availability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References