Lucene search
TwcertCVE-2024-8328HistoryAug 30, 2024 - 3:15 a.m.
CVE-2024-8328
2024-08-3003:15:04
CWE-79
twcert
web.nvd.nist.gov
26
online learning platform
remote attackers
javascript injection
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
14.7%
Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with regular privilege to inject arbitrary JavaScript code and perform Reflected Cross-site scripting attacks.
Affected configurations
Node
easy_test_online_learning_and_testing_platform_projecteasy_test_online_learning_and_testing_platformRange<24a01
| Vendor | Product | Version | CPE |
|---|---|---|---|
| easy_test_online_learning_and_testing_platform_project | easy_test_online_learning_and_testing_platform | * | cpe:2.3:a:easy_test_online_learning_and_testing_platform_project:easy_test_online_learning_and_testing_platform:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Easy test Online Learning and Testing Platform",
"vendor": "HWA JIUH DIGITAL TECHNOLOGY",
"versions": [
{
"lessThan": "24A01",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
14.7%
Related for CVE-2024-8328