Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2024-41709
HistoryJul 22, 2024 - 12:00 a.m.

CVE-2024-41709

2024-07-2200:00:00
mitre
github.com
3
backdrop cms
field labels
sanitization

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

14.5%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Backdrop CMS before 1.27.3 and 1.28.x before 1.28.2 does not sufficiently sanitize field labels before they are displayed in certain places. This vulnerability is mitigated by the fact that an attacker must have a role with the “administer fields” permission.

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

14.5%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-41709