CVE-2024-8643

Session Fixation vulnerability in Oceanic Software ValeApp allows Brute Force, Session Hijacking. This issue affects ValeApp: before v2.0.0...

CVE-2024-8644

Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protocol Manipulation, : JSON Hijacking aka JavaScript Hijacking.This issue affects ValeApp: before v2.0.0...

CVE-2024-8608

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Oceanic Software ValeApp allows Stored XSS.This issue affects ValeApp: before v2.0.0...

PT-2024-39149 · Oceanic · Valeapp

Name of the Vulnerable Software and Affected Versions: ValeApp versions prior to 2.0.0 Description: The issue affects Oceanic Software ValeApp, allowing protocol manipulation through JSON Hijacking, also known as JavaScript Hijacking, due to cleartext storage of sensitive information in a cookie...