Products
Eramba
- 3.22.3
- 3.23.0
Source
cve@mitre.org
Tags
CVE-2024-27593 details
Published : May 15, 2024, 5:15 p.m.
Last Modified : May 15, 2024, 6:35 p.m.
Last Modified : May 15, 2024, 6:35 p.m.
Description
A stored cross-site scripting (XSS) vulnerability in the Filter function of Eramba Version 3.22.3 Community Edition allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the filter name field. This vulnerability has been fixed in version 3.23.0.
CVSS Score
| 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|
References
| URL | Source |
|---|---|
| https://blog.smarttecs.com/posts/2024-002-cve-2024-27593/ | cve@mitre.org |
This website uses the NVD API, but is not approved or certified by it.