Lucene search

CVE-2024-4026 Cross-Site Scripting in the Holded application

🗓️ 22 Apr 2024 11:25:51Reported by INCIBEType

XSS vulnerability in Holded app allows session takeover

Reporter	Title	Published	Views	Family All 3
CVE	CVE-2024-4026	22 Apr 202412:15	–	cve
Vulnrichment	CVE-2024-4026 Cross-Site Scripting in the Holded application	22 Apr 202411:51	–	vulnrichment
NVD	CVE-2024-4026	22 Apr 202412:15	–	nvd

[
  {
    "defaultStatus": "unaffected",
    "product": "Holded",
    "vendor": "Holded",
    "versions": [
      {
        "lessThan": "4.20.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
incibe	www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-holded-application

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Apr 2024 11:51Current

4.7Medium risk

Vulners AI Score4.7

CVSS34.6

EPSS0.000

CWE-79