Lucene search

TwcertVULNRICHMENT:CVE-2024-8328

HistoryAug 30, 2024 - 2:20 a.m.

CVE-2024-8328 HWA JIUH DIGITAL TECHNOLOGY Easy test Online Learning and Testing Platform - Reflected XSS

2024-08-3002:20:50

CWE-79

twcert

github.com

hwa jiuh digital technology

online learning platform

reflected xss

remote attackers

javascript injection

security vulnerability

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

6.8

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with regular privilege to inject arbitrary JavaScript code and perform Reflected Cross-site scripting attacks.

References

www.twcert.org.tw/en/cp-139-8033-0a98f-2.html

www.twcert.org.tw/tw/cp-132-8028-360e1-1.html