CVE-2024-42834

Título del Exploit: VULNERABILIDAD DE CROSS-SITE SCRIPTING XSS ALMACENADO EN INCOGNITO SAC Fecha: 26 DE JULIO DE 2024 Autor del Exploit: Etienne Supra Página web del proveedor: https://www.incognito.com/products/service-activation-center/ Versión: 14.11 CVE : CVE-2024-42834 Se ha informado al...

CVE-2024-42834

A stored cross-site scripting XSS vulnerability in the Create Customer API in Incognito Service Activation Center SAC UI v14.11 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the lastName parameter...

CVE-2024-42834

The CVE-2024-42834 issue is a stored XSS in the Create Customer API of Incognito Service Activation Center (SAC) UI v14.11. An authenticated attacker can inject a crafted payload via the lastName parameter to execute arbitrary web scripts or HTML. Details across Red Hat, NVD, CNNVD, CIRCL and rel...