Lucene search

K
vulnrichmentAdobeVULNRICHMENT:CVE-2024-41849
HistoryAug 23, 2024 - 4:53 p.m.

CVE-2024-41849 HTML Injection on `https://author-bugbounty-65-prod.adobecqms.net/`

2024-08-2316:53:43
CWE-20
adobe
github.com
1
html injection
adobe experience manager
improper input validation
security feature bypass
low-privileged attacker
user interaction
integrity affectance
scope change

CVSS3

4.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

18.3%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could lead to a security feature bypass. An low-privileged attacker could leverage this vulnerability to slightly affect the integrity of the page. Exploitation of this issue requires user interaction and scope is changed.

CVSS3

4.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

18.3%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-41849