Reflected Cross-Site Scripting Vulnerability in Adobe Connect

CVE-2024-54048

Summary

Adobe Connect versions 12.6, 11.4.7, and earlier are susceptible to a reflected Cross-Site Scripting vulnerability. An unauthenticated attacker can exploit this issue by luring a victim to a specially crafted URL associated with a vulnerable page. When the victim accesses this URL, it can execute malicious JavaScript within the victim's browser, potentially leading to unauthorized access or data compromise. This vulnerability highlights the need for robust input validation and user awareness to prevent exploitation.

References