CVE-2024-9467 — Expedition: Reflected Cross-Site Scripting Vulnerability Leads to Expedition Session Disclosure

CVE-2024-9467

Expedition: Reflected Cross-Site Scripting Vulnerability Leads to Expedition Session Disclosure PUBLISHED

Description (CNA)

A reflected XSS vulnerability in Palo Alto Networks Expedition enables execution of malicious JavaScript in the context of an authenticated Expedition user's browser if that user clicks on a malicious link, allowing phishing attacks that could lead to Expedition browser session theft.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Expedition	affected 1.2.0 before 1.2.96

CWE

CWE-79

References

https://security.paloaltonetworks.com/PAN-SA-2024-0010

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.