CVE-2024-12223 — Stored Cross-site Scripting (XSS) in Nutanix Prism Central

CVE-2024-12223

Stored Cross-site Scripting (XSS) in Nutanix Prism Central PUBLISHED

Description (CNA)

Prism Central versions prior to 2024.3.1 are vulnerable to a stored cross-site scripting attack via the Events component, allowing an attacker to hijack a victim user’s session and perform actions in their security context.

Affected (CNA)

Vendor / product	Versions
Nutanix / Prism Central	affected 0 before 2024.3.1

CWE

CWE-79

References

https://www.themissinglink.com.au/security-advisories/cve-2024-12223

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.