POC_CVE-2024-40492

CVE-2024-40492: 저장형 XSS에서 ATO까지 설명 저장형 크로스 사이트 스크립팅XSS은 일반적으로 웹 애플리케이션에서 발견되는 보안 취약점 유형입니다. 공격자가 악성 스크립트를 웹 애플리케이션에 주입할 수 있고, 해당 스크립트가 서버에 저장될 때 발생합니다. 다른 사용자가 악성 스크립트가 포함된 데이터에 접근하면 해당 스크립트가 사용자의 브라우저에서 실행됩니다. 재현 단계 1. https://app.heartbeat.chat/ 로 이동합니다. 2. 다음 세부 정보로 계정을 생성합니다: 이름:...

CVE-2024-40492

Cross Site Scripting vulnerability in Heartbeat Chat v.15.2.1 allows a remote attacker to execute arbitrary code via the setname function...

CVE-2024-40492

Cross Site Scripting vulnerability in Heartbeat Chat v.15.2.1 allows a remote attacker to execute arbitrary code via the setname function...

CVE-2024-40492

Cross Site Scripting vulnerability in Heartbeat Chat v.15.2.1 allows a remote attacker to execute arbitrary code via the setname function...

CVE-2024-40492: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Heartbeat Chat v.15.2.1 allows a remote attacker to execute arbitrary code via the setname function...

CVE-2024-40492

Cross Site Scripting vulnerability in Heartbeat Chat v.15.2.1 allows a remote attacker to execute arbitrary code via the setname function...

PT-2024-28875 · Unknown · Heartbeat Chat

Name of the Vulnerable Software and Affected Versions: Heartbeat Chat version 15.2.1 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the setname function. This enables the attacker to perform unauthorized actions on the affected system...

CVE-2024-40492

Heartbeat Chat version 15.2.1 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability in the setname function. A remote attacker can inject malicious scripts into the application, which are stored on the server and executed in the browsers of other users who view the affected user's se...