PT-2024-6885 · Palo Alto Networks · Palo Alto Networks Expedition

Enrique Castillo · Published 2024-10-09 · Updated 2024-11-16 · CVE-2024-9467

Positive Technologies (AI Summary)

CVSS v4.0

7.0

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Amber

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Expedition (affected versions not specified)

Description A reflected XSS issue in Palo Alto Networks Expedition allows the execution of malicious JavaScript in the context of an authenticated user's browser if they click on a malicious link. This enables phishing attacks that could lead to browser session theft. The vulnerability is related to the lack of protection of the web page structure, which can be exploited by a remote attacker to conduct cross-site scripting attacks by executing arbitrary JavaScript code and redirecting the user to an arbitrary URL.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2024-08108

CVE-2024-9467

Affected Products

Palo Alto Networks Expedition

References · 40

• https://osv.dev/vulnerability/CVE-2024-9467 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-08108 · Security Note
• https://security.paloaltonetworks.com/PAN-SA-2024-0010 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-9467 · Security Note
• https://twitter.com/punitdarji28/status/1845753553765253576 · Twitter Post
• https://twitter.com/patchnow24x7/status/1844238096478634057 · Twitter Post
• https://twitter.com/CROWDSTRIKEtech/status/1847065644472127855 · Twitter Post
• https://twitter.com/patchnow24x7/status/1844237974839623704 · Twitter Post
• https://t.me/cvenotify/98113 · Telegram Post
• https://app.opencve.io/cve/CVE-2024-9467 · Note
• https://twitter.com/CROWDSTRIKEtech/status/1846008197779189930 · Twitter Post
• https://twitter.com/rfwaveio/status/1845089850929652114 · Twitter Post
• https://twitter.com/Darkweb_wirespy/status/1846917317684326878 · Twitter Post
• https://twitter.com/patchnow24x7/status/1844238326922084695 · Twitter Post
• https://twitter.com/cyberpuck01/status/1857916793441935463 · Twitter Post