Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 10:17 a.m.•20 views

CVE-2024-30920

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the render-document.php component...

7.4CVSS7.3AI score0.01027EPSS
SaveExploits2References1
NVD
NVD
•added 2024/04/18 9:15 p.m.•38 views

CVE-2024-30920

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the render-document.php component...

7.4CVSS7AI score0.01027EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
•added 2024/04/18 12:00 a.m.•21 views

CVE-2024-30920

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the render-document.php component...

7.3AI score0.01027EPSS
SaveExploits2References1
CVE
CVE
•added 2024/04/18 12:00 a.m.•73 views

CVE-2024-30920

A Cross-Site Scripting (XSS) vulnerability exists in DerbyNet v9.0 and below within the render-document.php component. The root cause is the application's failure to properly sanitize user input in document rendering paths, specifically when displaying debug information such as ORIG_SCRIPT_FILENA...

7.4CVSS7.2AI score0.01027EPSS
SaveExploits2References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/18 12:00 a.m.•4 views

CVE-2024-30920: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the render-document.php component...

7.4CVSS6.6AI score0.01027EPSS
SaveExploits2References2
Mend
Mend
•added 2024/04/18 12:00 a.m.•2 views

CVE-2024-30920

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the render-document.php component...

8.3CVSS0.01027EPSS
SaveExploits2References2
Rows per page
Query Builder