CVE-2024-34469

CVE-2024-34469 La versión Rukovoditel hasta la 3.5.3 se ve afectada por un ataque de cross-site scripting XSS El payload puede incrustarse en dos lugares: en la página de registro y en la cuenta personal del usuario con cualquier privilegio. La vulnerabilidad está en el parámetro userphoto. 1...

CVE-2024-34468

Rukovoditel before 3.5.3 allows XSS via userphoto to My Page...

CVE-2024-34468

Rukovoditel before 3.5.3 allows XSS via userphoto to My Page...

CVE-2024-34469

Rukovoditel before 3.5.3 allows XSS via userphoto to index.php?module=users/registration&action=save...

CVE-2024-34468

Rukovoditel before 3.5.3 allows XSS via userphoto to My Page...

CVE-2024-34468

The open-source project management software Rukovoditel is vulnerable to a Cross-Site Scripting (XSS) attack in versions prior to 3.5.3 . The root cause is the improper neutralization of input via the user_photo parameter on the My Page section, which can lead to the execution of malicious script...

CVE-2024-34468

Rukovoditel before 3.5.3 allows XSS via userphoto to My Page...

CVE-2024-34469

Rukovoditel before 3.5.3 allows XSS via userphoto to index.php?module=users/registration&action=save...