Lucene search

K
nvd[email protected]NVD:CVE-2024-44793
HistoryAug 26, 2024 - 8:15 p.m.

CVE-2024-44793

2024-08-2620:15:08
CWE-79
web.nvd.nist.gov
3
cross-site scripting
gazelle
vulnerability
xss
commit 63b3370

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

21.3%

A cross-site scripting (XSS) vulnerability in the component /managers/multiple_freeleech.php of Gazelle commit 63b3370 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the torrents parameter.

Affected configurations

Nvd
Node
gazelle_projectgazelleRange<2016-11-08
VendorProductVersionCPE
gazelle_projectgazelle*cpe:2.3:a:gazelle_project:gazelle:*:*:*:*:*:*:*:*

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

21.3%

Related for NVD:CVE-2024-44793