Lucene search

[email protected]NVD:CVE-2024-7657

HistoryAug 12, 2024 - 1:38 p.m.

CVE-2024-7657

2024-08-1213:38:49

CWE-79

[email protected]

web.nvd.nist.gov

gila cms vulnerability

cross site scripting

remote attack

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

23.8%

JSON

A vulnerability classified as problematic was found in Gila CMS 1.10.9. This vulnerability affects unknown code of the file /cm/update_rows/page?id=2 of the component HTTP POST Request Handler. The manipulation of the argument content leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected configurations

Nvd

Node

gilacmsgila_cmsMatch1.10.9

VendorProductVersionCPE
gilacmsgila_cms1.10.9cpe:2.3:a:gilacms:gila_cms:1.10.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gilacms	gila_cms	1.10.9	cpe:2.3:a:gilacms:gila_cms:1.10.9:::::::*

References

vuldb.com/?ctiid.274114

vuldb.com/?id.274114

vuldb.com/?submit.384630

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

23.8%

JSON

Related for NVD:CVE-2024-7657

vulnrichment1 cve1 cvelist1