Lucene search

K

[email protected]NVD:CVE-2024-22910

HistoryMay 14, 2024 - 2:58 p.m.

CVE-2024-22910

2024-05-1414:58:26

[email protected]

web.nvd.nist.gov

1

cross site scripting

crushftp

arbitrary code execution

crafted payload

6 Medium

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

Cross Site Scripting (XSS) vulnerability in CrushFTP v.10.6.0 and v.10.5.5 allows an attacker to execute arbitrary code via a crafted payload.

References

gist.github.com/cgnl/672ace3cbad1116fcd9ae633e54ea9f8

6 Medium

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

Related for NVD:CVE-2024-22910