Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2024-24507
HistoryJul 22, 2024 - 12:00 a.m.

CVE-2024-24507

2024-07-2200:00:00
mitre
github.com
2
act-on 2023
cross site scripting
remote attacker
arbitrary code
newuser parameter

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

17.7%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Cross Site Scripting vulnerability in Act-On 2023 allows a remote attacker to execute arbitrary code via the newUser parameter in the login.jsp component.

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

17.7%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-24507