Adobe Connect DOM-Based Cross-Site Scripting Vulnerability Allowing Session Takeover

A DOM-based cross-site scripting vulnerability has been identified in Adobe Connect versions 12.9 and earlier. This vulnerability allows attackers to execute malicious scripts in the context of the victim's browser. Exploitation requires user interaction, as the victim must visit a specially crafted web page. Successful exploitation could lead to session takeover, significantly impacting the confidentiality and integrity of the affected user.

Impact

Exploitation of this vulnerability could result in arbitrary code execution in the context of the victim's browser, potentially leading to session takeover.

Remediation

Users are advised to update Adobe Connect to version 12.10, available for both Windows and macOS.