RhinOS 3.0-1190 XSS Vulnerability Could Lead to User Session Details Theft

CVE-2024-5408

Summary

The vulnerability in RhinOS 3.0-1190 is characterized by a Cross-Site Scripting (XSS) flaw within the 'search' parameter of the /portal/search.htm endpoint. This vulnerability can be exploited by a remote attacker who crafts a malicious URL. Once a victim interacts with this URL, it may lead to unauthorized access and extraction of sensitive session information, potentially compromising the integrity of user accounts. Users of RhinOS should apply necessary patches and maintain vigilance against this security risk.

References