CVE-2024-9467

A reflected XSS vulnerability in Palo Alto Networks Expedition enables execution of malicious JavaScript in the context of an authenticated Expedition user's browser if that user clicks on a malicious link, allowing phishing attacks that could lead to Expedition browser session theft.

Score

CVSS 4.0 7.0 High

Status

Analyzed - psirt@paloaltonetworks.com

Published

2024-10-09

Last modified

2024-10-18

Weaknesses

CWE-79

Affected products

• Expedition (Paloaltonetworks)

References

• https://security.paloaltonetworks.com/PAN-SA-2024-0010