Lucene search

K
nvd[email protected]NVD:CVE-2024-41346
HistoryAug 29, 2024 - 8:15 p.m.

CVE-2024-41346

2024-08-2920:15:08
CWE-79
web.nvd.nist.gov
1
openflights
commit 5234b5b
xss
vulnerability
php
submit.php

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0

Percentile

14.7%

openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/submit.php

Affected configurations

Nvd
Node
jpatokalopenflightsMatch2024-08-20
VendorProductVersionCPE
jpatokalopenflights2024-08-20cpe:2.3:a:jpatokal:openflights:2024-08-20:*:*:*:*:*:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0

Percentile

14.7%

Related for NVD:CVE-2024-41346