Lucene search

MitreVULNRICHMENT:CVE-2024-37672

HistoryJun 21, 2024 - 12:00 a.m.

CVE-2024-37672

2024-06-2100:00:00

mitre

github.com

cross site scripting

tessi docubase

document management

remote attacker

arbitrary code

idactivity parameter

AI Score

7.3

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the idactivity parameter.

References

docubase.com

tessi.com

github.com/MohamedAzizMSALLEMI/Docubase_Security/blob/main/CVE-2024-37672.md