CVE-2024-12020

creationtimestamp| type| source ---|---|--- 2025-03-14 20:46:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkei5xsxod2l 2025-03-14 20:53:50+00:00| seen| https://t.me/cvedetector/20338...

CVE-2024-12020 Reflected Cross-Site Scripting (XSS)

There is a reflected cross-site scripting XSS within JSP files used to control application appearance. An unauthenticated attacker could deceive a user into clicking a crafted link to trigger the vulnerability. Stealing the session cookie is not possible due to cookie security flags, however the...