Lucene search

K
nvdBbf0bd87-ece2-41be-b873-96928ee8fab9NVD:CVE-2024-6892
HistoryAug 08, 2024 - 12:15 a.m.

CVE-2024-6892

2024-08-0800:15:40
CWE-81
CWE-79
bbf0bd87-ece2-41be-b873-96928ee8fab9
web.nvd.nist.gov
1
malicious link
javascript
journyx web app

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

17.7%

Attackers can craft a malicious link that once clicked will execute arbitrary JavaScript in the context of the Journyx web application.

Affected configurations

Nvd
Node
journyxjournyxMatch11.5.4
VendorProductVersionCPE
journyxjournyx11.5.4cpe:2.3:a:journyx:journyx:11.5.4:*:*:*:*:*:*:*

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

17.7%