CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

NVD•added 2024/11/29 6:15 p.m.•17 views

CVE-2024-36624

Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the constructcopydiv function in copyandpaste.js...

5.4CVSS0.00102EPSS

Exploits0References3

OSV•added 2024/11/29 6:15 p.m.•4 views

CVE-2024-36624

Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the constructcopydiv function in copyandpaste.js...

5.4CVSS6AI score

Exploits0References3

Vulnrichment•added 2024/11/29 12:0 a.m.•9 views

CVE-2024-36624

Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the constructcopydiv function in copyandpaste.js...

6AI score0.00102EPSS

Exploits0References3

CVE•added 2024/11/29 12:0 a.m.•42 views

CVE-2024-36624

CVE-2024-36624 affects Zulip 8.3 and is caused by the construct_copy_div function in copy_and_paste.js, enabling Cross-Site Scripting (XSS). The vulnerability is confirmed across multiple feeds (NVD, OSV, CVE list) with the same description. Practical impact is XSS via copying/pasting content thr...

5.4CVSS5.8AI score0.00102EPSS

Exploits0References3Affected Software1