CVE-2024-7124

CVE-2024-7124 affects DInGO dLibra software (versions 6.0–6.3.19). The vulnerability is a Reflected Cross-Site Scripting (XSS) in the indexsearch endpoint’s filter parameter, caused by improper neutralization of input during web page generation. Exploitation would require a user to click a crafte...