CVE-2024-42834

Exploit-Titel: INCOGNITO SAC GESPEICHERTE CROSS-SITE-SCRIPTING XSS SCHWACHSTELLE Datum: 26. JULI 2024 Exploit-Autor: Etienne Supra Hersteller-Homepage: https://www.incognito.com/products/service-activation-center/ Version: 14.11 CVE : CVE-2024-42834 Der Hersteller wurde informiert und hat die...

CVE-2024-42834

The CVE-2024-42834 issue is a stored XSS in the Create Customer API of Incognito Service Activation Center (SAC) UI v14.11. An authenticated attacker can inject a crafted payload via the lastName parameter to execute arbitrary web scripts or HTML. Details across Red Hat, NVD, CNNVD, CIRCL and rel...

CVE-2024-42834

A stored cross-site scripting XSS vulnerability in the Create Customer API in Incognito Service Activation Center SAC UI v14.11 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the lastName parameter...