Lucene search

K

MitreCVELIST:CVE-2024-44795

HistoryAug 26, 2024 - 12:00 a.m.

CVE-2024-44795

2024-08-2600:00:00

mitre

www.cve.org

cross-site scripting

gazelle commit 63b3370

username parameter

EPSS

0.001

Percentile

21.3%

A cross-site scripting (XSS) vulnerability in the component /login/disabled.php of Gazelle commit 63b3370 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter.

References

gazelle.com

github.com/WhatCD/Gazelle

github.com/WhatCD/Gazelle/issues/129

EPSS

0.001

Percentile

21.3%

Related for CVELIST:CVE-2024-44795

vulnrichment1 nvd1 cve1