Lucene search
HistoryMar 07, 2024 - 4:15 a.m.
CVE-2024-28095
cve-2024-28095
schoolbox application
cross-site scripting
authenticated attacker
security actions
CVSS3
7.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
EPSS
0
Percentile
9.0%
News functionality in Schoolbox application before
version 23.1.3 is vulnerable to stored cross-site scripting allowing
authenticated attacker to perform security actions in the context of the
affected users.
Related
vulnrichment
vulnrichment
prion
prion
Cross site scripting
2024-03-07 04:15:00
cvelist
cvelist
cve
cve
CVE-2024-28095
2024-03-07 04:15:07
CVSS3
7.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-28095