Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2024-40101
HistoryAug 06, 2024 - 12:00 a.m.

CVE-2024-40101

2024-08-0600:00:00
mitre
github.com
2
cve-2024-40101
remote attackers
keywords parameter
web script
html
unauthenticated

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

21.3%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

A Reflected Cross-site scripting (XSS) vulnerability exists in ‘/search’ in microweber 2.0.15 and earlier allowing unauthenticated remote attackers to inject arbitrary web script or HTML via the ‘keywords’ parameter.

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

21.3%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-40101