CVE-2024-37775

Sunbird DCIM dcTrack v9.1.2 is affected by an incorrect access control vulnerability. This flaw allows an attacker to create or update a ticket with a location that bypasses Role-Based Access Control (RBAC) checks. This bypass could allow unauthorized modification of tickets. As a temporary worka...

CVE-2024-37773

Sunbird DCIM dcTrack version 9.1.2 is affected by an HTML injection vulnerability. An attacker authenticated as an administrator can inject arbitrary HTML code into an admin screen. While the vulnerability allows for unauthorized content injection, specific details regarding the underlying techni...

CVE-2024-37774

A Cross-Site Request Forgery (CSRF) vulnerability exists in Sunbird DCIM dcTrack v9.1.2 . This flaw allows authenticated attackers to escalate privileges by forcing an Administrator user to perform sensitive requests within certain administrative screens. To mitigate this risk, it is recommended ...

CVE-2024-37776

A cross-site scripting (XSS) vulnerability exists in Sunbird DCIM dcTrack v9.1.2 . This flaw allows an attacker to execute arbitrary web scripts or HTML by providing a crafted payload through certain admin screens . The underlying cause is the improper neutralization of input during web page gene...