Lucene search
CERT-PLVULNRICHMENT:CVE-2024-6450HistoryAug 28, 2024 - 11:50 a.m.
CVE-2024-6450 Reflected XSS in HyperView Geoportal Toolkit
2024-08-2811:50:20
CWE-79
CERT-PL
github.com
2
cve-2024-6450; hyperview; geoportal toolkit; reflected xss; cross-site scripting; unauthenticated attacker; crafted url; script; browser
CVSS4
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
PASSIVE
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/SC:L/VI:L/SI:L/VA:N/SA:L
AI Score
6.1
Confidence
High
EPSS
0.001
Percentile
17.7%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
HyperView Geoportal Toolkit in versions lower than 8.5.0 is vulnerable to Reflected Cross-Site Scripting (XSS). An unauthenticated attacker might trick somebody into using a crafted URL, which will cause a script to be run in user’s browser.
Related
cve
cve
CVE-2024-6450
2024-08-28 12:15:06
cvelist
cvelist
CVE-2024-6450 Reflected XSS in HyperView Geoportal Toolkit
2024-08-28 11:50:20
nvd
nvd
CVE-2024-6450
2024-08-28 12:15:06
CVSS4
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
PASSIVE
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/SC:L/VI:L/SI:L/VA:N/SA:L
AI Score
6.1
Confidence
High
EPSS
0.001
Percentile
17.7%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-6450