Lucene search
HistorySep 10, 2024 - 4:15 p.m.
CVE-2024-44676
eladmin v2.7
xss vulnerability
localstorecontroller.java
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
14.7%
eladmin v2.7 and before is vulnerable to Cross Site Scripting (XSS) which allows an attacker to execute arbitrary code via LocalStoreController. java.
Affected configurations
Node
eladmineladminRange≤2.7
Related
cve
cve
CVE-2024-44676
2024-09-10 16:15:20
vulnrichment
vulnrichment
CVE-2024-44676
2024-09-10 00:00:00
cvelist
cvelist
CVE-2024-44676
2024-09-10 00:00:00
osv
osv
CVE-2024-44676
2024-09-10 16:15:20
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
14.7%
Related for NVD:CVE-2024-44676