CVE-2024-6370

🗓️ 27 Jun 2024 12:00:09Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 49 Views🌐 WEB

A problematic vulnerability found in LabVantage LIMS 2017's POST Request Handle

Reporter	Title	Published	Views	Family All 7
CNNVD	LabVantage Solutions LIMS Cross-Site Scripting Vulnerability	27 Jun 202400:00	–	cnnvd
Cvelist	CVE-2024-6370 LabVantage LIMS POST Request cross site scripting	27 Jun 202412:00	–	cvelist
EUVD	EUVD-2024-47477	3 Oct 202520:07	–	euvd
NVD	CVE-2024-6370	27 Jun 202412:15	–	nvd
Positive Technologies	PT-2024-37574 · Labvantage · Labvantage Lims	27 Jun 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-6370	23 May 202509:25	–	redhatcve
Vulnrichment	CVE-2024-6370 LabVantage LIMS POST Request cross site scripting	27 Jun 202412:00	–	vulnrichment

NVD

Vulners

Vulnrichment

Node

labvantage laboratory_information_management_systemMatch2017

[
  {
    "vendor": "LabVantage",
    "product": "LIMS",
    "versions": [
      {
        "version": "2017",
        "status": "affected"
      }
    ],
    "modules": [
      "POST Request Handler"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
gentle-khaan-c53	www.gentle-khaan-c53.notion.site/HTML-Injection-in-Labvantage-LIMS-a229aae13fa14977a677921e7a442619
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
bulletinbody	request body	/labvantage/rc?command=file&file=WEB-OPAL/pagetypes/bulletins/sendbulletin.jsp	XSS via bulletinbody parameter in POST Request Handler at the specified endpoint.	CWE-79

21 Nov 2024 09:49Current

4Medium risk

Vulners AI Score4

CVSS 3.13.5 - 5.4

CVSS 24

CVSS 45.3

CVSS 33.5

EPSS0.00152

SSVC

CWE-79