PT-2024-19586 · Darktrace · Darktrace Threat Visualizer

Published 2024-02-16 · Updated 2025-01-13 · CVE-2024-22854

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Darktrace Threat Visualizer versions 6.1.27 and before

Description A DOM-based HTML injection vulnerability has been identified in the main page of Darktrace Threat Visualizer. This issue allows a remote attacker to craft a URL that, when visited by an authenticated user, can lead to open redirect and potential credential stealing using an injected HTML form.

Recommendations For Darktrace Threat Visualizer versions 6.1.27 and before, consider disabling access to the main page until a patch is available to prevent potential credential stealing. Restrict access to the vulnerable component to minimize the risk of exploitation. Avoid using the vulnerable version until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Open Redirect

XSS

Weakness Enumeration

CWE-601

CWE-79

Related Identifiers

CVE-2024-22854

Affected Products

Darktrace Threat Visualizer

References · 7

• 🔥 https://tomekwasiak.pl/cve-2024-22854 · Exploit
• https://osv.dev/vulnerability/CVE-2024-22854 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-22854 · Security Note
• https://t.me/cvenotify/71699 · Telegram Post
• https://twitter.com/CVEnew/status/1758410445634048127 · Twitter Post
• https://t.me/cvenotify/107202 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1758456027622596905 · Twitter Post