CVE-2024-5906

Publication date

2024-06-12 16:22:38

Family

palo_alto

State

PUBLISHED

Description

A cross-site scripting (XSS) vulnerability in Palo Alto Networks Prisma Cloud Compute software enables a malicious administrator with add/edit permissions for identity providers to store a JavaScript payload using the web interface on Prisma Cloud Compute. This enables a malicious administrator to perform actions in the context of another users browser when accessed by that other user.