VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 9, 2024· Updated Oct 18, 2024

Expedition: Reflected Cross-Site Scripting Vulnerability Leads to Expedition Session Disclosure

CVE-2024-9467

Description

A reflected XSS vulnerability in Palo Alto Networks Expedition enables execution of malicious JavaScript in the context of an authenticated Expedition user's browser if that user clicks on a malicious link, allowing phishing attacks that could lead to Expedition browser session theft.

Affected products

2
  • Paloaltonetworks/Expeditioncpe-rescue2 versions
    cpe:2.3:a:paloaltonetworks:expedition:1.2.0:-:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:paloaltonetworks:expedition:1.2.0:-:*:*:*:*:*:*range: 1.2.0
    • (no CPE)

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.