medium6.1
CVE-2024-9467
A reflected XSS vulnerability in Palo Alto Networks Expedition enables execution of malicious JavaScript in the context of an authenticated Expedition user's b…
Impact
A reflected XSS vulnerability in Palo Alto Networks Expedition enables execution of malicious JavaScript in the context of an authenticated Expedition user's browser if that user clicks on a malicious link, allowing phishing attacks that could lead to Expedition browser session theft.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Paloaltonetworks | Expedition | from 1.2.0 before 1.2.96 |