CVE-2024-52951

Stored Cross-Site Scripting in the Access Request History in Omada Identity before version 15 update 1 allows an authenticated attacker to execute arbitrary code in the browser of a victim via a specially crafted link or by viewing a manipulated Access Request History...

Omada Identity Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Stored Cross-Site Scripting product: Omada Identity vulnerable version: v15U1, v14.14 hotfix 309 fixed version: v15U1, v14.14 hotfix 309 CVE number: CVE-2024-52951 impact...

CVE-2024-52951

Stored Cross-Site Scripting in the Access Request History in Omada Identity before version 15 update 1 allows an authenticated attacker to execute arbitrary code in the browser of a victim via a specially crafted link or by viewing a manipulated Access Request History...

CVE-2024-52951

creationtimestamp| type| source ---|---|--- 2024-11-27 14:37:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113555422037212953 2024-11-27 19:23:40+00:00| seen| https://schleuss.online/users/vulnbot/statuses/113556548358493435...

CVE-2024-52951

Stored Cross-Site Scripting in the Access Request History in Omada Identity before version 15 update 1 allows an authenticated attacker to execute arbitrary code in the browser of a victim via a specially crafted link or by viewing a manipulated Access Request History...