Prism Central versions prior to 2024.3.1 are vulnerable to a stored cross-site scripting attack via the Events component. This vulnerability allows an attacker to hijack a victim user’s session and perform actions in their security context.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.3 | CVE-2024-12223 |
Exploitation
To exploit this vulnerability, an attacker can craft a malicious payload that is stored in the Events component of Prism Central. When a victim accesses the compromised component, the payload is executed in the context of the victim’s session, allowing the attacker to perform unauthorized actions.
Affected Products
- Prism Central versions prior to 2024.3.1: Vulnerable to stored XSS attacks via the Events component, enabling session hijacking.
Mitigation
To mitigate this vulnerability, it is recommended to upgrade Prism Central to version 2024.3.1 or later. Additionally, implementing proper input validation and output encoding can help prevent similar attacks in the future.