Lucene search

KoreLogicCVE-2024-6892

HistoryAug 08, 2024 - 12:15 a.m.

CVE-2024-6892

2024-08-0800:15:40

CWE-79

CWE-81

KoreLogic

web.nvd.nist.gov

cve-2024-6892

journyx web application

crafted link

malicious javascript

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

17.7%

JSON

Attackers can craft a malicious link that once clicked will execute arbitrary JavaScript in the context of the Journyx web application.

Affected configurations

Nvd

Node

journyxjournyxMatch11.5.4

VendorProductVersionCPE
journyxjournyx11.5.4cpe:2.3:a:journyx:journyx:11.5.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
journyx	journyx	11.5.4	cpe:2.3:a:journyx:journyx:11.5.4:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "Journyx (jtime)",
    "vendor": "Journyx",
    "versions": [
      {
        "status": "affected",
        "version": "11.5.4"
      }
    ]
  }
]

References

korelogic.com/Resources/Advisories/KL-001-2024-009.txt

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

17.7%

JSON

Related for CVE-2024-6892