CVE-2024-35432

1976-01-0100:00:00

mitre

github.com

AI Score

6.2

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Cross Site Scripting (XSS) via an Audio File. An authenticated user can injection malicious JavaScript code to trigger a Cross Site Scripting.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:zkteco:zkbio_cvsecurity:6.11:*:*:*:*:*:*:*"
    ],
    "vendor": "zkteco",
    "product": "zkbio_cvsecurity",
    "versions": [
      {
        "status": "affected",
        "version": "6.11"
      }
    ],
    "defaultStatus": "unknown"
  }
]