Lucene search
HistorySep 12, 2024 - 12:15 p.m.
CVE-2024-8750
cross-site scripting
idoit pro version 28
vulnerability
session details
authenticated user
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
17.8%
Cross-site Scripting (XSS) vulnerability in idoit pro version 28. This vulnerability allows an attacker to retrieve session details of an authenticated user due to lack of proper sanitization of the following parameters (id,lang,mNavID,name,pID,treeNode,type,view).
Affected configurations
Node
i-doiti-doitMatch28pro
Related
vulnrichment
vulnrichment
CVE-2024-8750 Cross-site Scripting vulnerability in Idoit pro
2024-09-12 11:38:24
cvelist
cvelist
CVE-2024-8750 Cross-site Scripting vulnerability in Idoit pro
2024-09-12 11:38:24
cve
cve
CVE-2024-8750
2024-09-12 12:15:54
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
17.8%
Related for NVD:CVE-2024-8750