Lucene search
HistoryAug 29, 2024 - 6:15 p.m.
CVE-2024-44778
reflected cross-site scripting
vtiger crm 7.4.0
arbitrary code execution
CVSS3
9.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
EPSS
0.002
Percentile
53.2%
A reflected cross-site scripting (XSS) vulnerability in the parent parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user’s browser via injecting a crafted payload.
Affected configurations
Node
vtigervtiger_crmMatch7.4.0-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| vtiger | vtiger_crm | 7.4.0 | cpe:2.3:a:vtiger:vtiger_crm:7.4.0:-:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2024-44778
2024-08-29 00:00:00
cve
cve
CVE-2024-44778
2024-08-29 18:15:14
vulnrichment
vulnrichment
CVE-2024-44778
2024-08-29 00:00:00
packetstorm
packetstorm
vTiger CRM 7.4.0 Cross Site Scripting
2024-08-29 00:00:00
zdt
zdt
vTiger CRM 7.4.0 Cross Site Scripting / Open Redirection Vulnerabilities
2024-08-29 00:00:00
CVSS3
9.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
EPSS
0.002
Percentile
53.2%
Related for NVD:CVE-2024-44778