A New SolarMarker Infostealer – Active IOCs
June 7, 2024PatchWork APT Threat Actor Group – Active IOCs
June 7, 2024A New SolarMarker Infostealer – Active IOCs
June 7, 2024PatchWork APT Threat Actor Group – Active IOCs
June 7, 2024Severity
High
Analysis Summary
CVE-2024-21682
Atlassian Assets Discovery Data Center is vulnerable to HTML injection. A remote authenticated attacker could inject malicious HTML code, which when viewed, would execute in the victim's Web browser within the security context of the hosting site.
Impact
- Gain Access
Indicators of Compromise
CVE
- CVE-2024-21682
Affected Vendors
Affected Products
- Atlassian Assets Discovery Data Center 6.1.9
Remediation
Refer to Atlassian Security Advisory for patch, upgrade or suggested workaround information.