Adobe Connect DOM-Based Cross-Site Scripting Vulnerability Allowing Session Takeover

A DOM-based cross-site scripting vulnerability has been identified in Adobe Connect versions 12.9 and earlier. This vulnerability allows a high-privileged attacker to execute malicious scripts in the browser of a victim who interacts with a crafted web page. The exploitation of this issue could lead to session takeover, significantly increasing the risk to the confidentiality and integrity of the affected user.

Impact

Exploitation of this vulnerability could result in arbitrary code execution in the context of the victim's browser, potentially leading to session takeover.

Remediation

Users are advised to update Adobe Connect to version 12.10, available for both Windows and macOS.