Palo Alto Networks Expedition Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in Palo Alto Networks Expedition. This vulnerability allows attackers to execute malicious JavaScript in the browser of an authenticated user. The issue arises when the user clicks a malicious link, potentially leading to phishing attacks and theft of the user's Expedition browser session.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can execute scripts in the context of the user's browser session.

Remediation

Users are advised to update to Expedition version 1.2.101 or later. However, since Expedition has reached its End of Life and is no longer supported, users should consider using the suggested alternatives listed in the Expedition End of Life Announcement.