Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2024-37675
HistoryJun 21, 2024 - 12:00 a.m.

CVE-2024-37675

2024-06-2100:00:00
mitre
github.com
4
cross site scripting
tessi docubase
document management
remote attacker
arbitrary code
parameter
section content
adding notes
uploaded file

AI Score

7.5

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the parameter β€œsectionContent” related to the functionality of adding notes to an uploaded file.

AI Score

7.5

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-37675