CVE-2024-44797

2024-08-2600:00:00

mitre

www.cve.org

cross-site scripting

gazelle

vulnerability

web scripts

html

crafted payload

EPSS

0.001

Percentile

21.3%

JSON

A cross-site scripting (XSS) vulnerability in the component /managers/enable_requests.php of Gazelle commit 63b3370 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the view parameter.

References

gazelle.com

github.com/WhatCD/Gazelle

github.com/WhatCD/Gazelle/issues/130

EPSS

0.001

Percentile

21.3%

JSON

Related for CVELIST:CVE-2024-44797