CVE-2024-37679

2024-06-2400:00:00

mitre

github.com

cross site scripting

hangzhou meisoft

finesoft v.8.0

remote attacker

executre arbitrary code

crafted script

7.2 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

Cross Site Scripting vulnerability in Hangzhou Meisoft Information Technology Co., Ltd. Finesoft v.8.0 and before allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp parameter.

References

github.com/dabaizhizhu/123/issues/4