CVE-2024-27593

A stored cross-site scripting XSS vulnerability in the Filter function of Eramba Version 3.22.3 Community Edition allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the filter name field. This vulnerability has been fixed in version 3.23.0...

CVE-2024-27593

CVE-2024-27593 describes a stored XSS in the Filter function of Eramba Community Edition 3.22.3. An authenticated attacker can inject a crafted payload into the filter name field to execute arbitrary web scripts/HTML. The issue affects Eramba 3.22.3 and has been fixed in version 3.23.0. The avail...

Eramba 安全漏洞

Eramba is an open source, enterprise-level IT governance application from Eramba UK. The program has features such as IT security, compliance auditing and analysis. A security vulnerability exists in Eramba version 3.22.3, which stems from the presence of a stored cross-site scripting XSS...