CVE-2024-22854

CVE-2024-22854 is a DOM-based HTML injection vulnerability affecting Darktrace Threat Visualizer version 6.1.27 and earlier. A remote attacker can craft a malicious URL that, when visited by an authenticated user, leads to an open redirect and potential credential theft via an injected HTML form. This vulnerability has a CVSS score of 6.1 (Medium), indicating a network attack vector with low complexity, requiring user interaction, and resulting in low confidentiality and integrity impacts. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.