Back

CVE-2024-23995

April 29, 2024, 4:15 p.m.

Received
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Beekeeper Studio

  • 4.1.13
  • earlier

Source

cve@mitre.org

Tags

CVE-2024-23995 details

Published : April 29, 2024, 4:15 p.m.
Last Modified : April 29, 2024, 4:15 p.m.

Description

Cross Site Scripting (XSS) in Beekeeper Studio 4.1.13 and earlier allows remote attackers to execute arbitrary code in the column name of a database table in tabulator-popup-container.

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description

References

URL Source
https://github.com/EQSTLab/PoC/blob/main/2024/RCE/CVE-2024-23995/README.md cve@mitre.org
https://www.beekeeperstudio.io/ cve@mitre.org
This website uses the NVD API, but is not approved or certified by it.