CVE-2024-6892 Journyx Reflected Cross Site Scripting

2024-08-0723:19:00

CWE-81

KoreLogic

www.cve.org

cve-2024-6892

journyx

cross site scripting

crafted link

arbitrary javascript

web application

EPSS

0.001

Percentile

17.7%

JSON

Attackers can craft a malicious link that once clicked will execute arbitrary JavaScript in the context of the Journyx web application.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "Journyx (jtime)",
    "vendor": "Journyx",
    "versions": [
      {
        "status": "affected",
        "version": "11.5.4"
      }
    ]
  }
]

References

korelogic.com/Resources/Advisories/KL-001-2024-009.txt

EPSS

0.001

Percentile

17.7%

JSON

Related for CVELIST:CVE-2024-6892