Description
A reflected XSS vulnerability in Palo Alto Networks Expedition enables execution of malicious JavaScript in the context of an authenticated Expedition user's browser if that user clicks on a malicious link, allowing phishing attacks that could lead to Expedition browser session theft.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palo Alto Networks | Expedition | 1.2.0 – < 1.2.96 | 1.2.96 |
Advisories 2
- WID-SEC-2024-3146 PaloAlto Networks Expedition: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 14, 2024
- NCSC-2024-0405 Kwetsbaarheden verholpen in Palo Alto Expedition NCSC-NL (Netherlands) · Oct 10, 2024
References
- https://security.paloaltonetworks.com/PAN-SA-2024-0010 vendor-advisory