Vulnerabilities / CVE-2024-37783

CVE-2024-37783

Published 2024-11-22 · published (not yet in NVD)

CVE-2024-37783

6.1 MEDIUM
CVSS 3.1 · CNA

0.4%
chance of exploitation in the next 30 days (EPSS; higher than 31% of CVEs)

A reflected cross-site scripting (XSS) vulnerability in Gladinet CentreStack v13.12.9934.54690 allows attackers to inject malicious JavaScript into the web browser of a victim via the sessionId parameter at /portal/ForgotPassword.aspx.

Scores

6.1CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NCNA

Affected products

n/a n/a: n/a

3 references (advisories, patches, write-ups)

https://www.centrestack.com/p/gce_latest_release.html
https://medium.com/%40jkoreamo/centrestack-vulnerability-disclosure-d28dc8f21a56
https://gist.githubusercontent.com/Draoken/9526cd338b7941340b7bf12340324215/raw/f32c03ee229210f9f039293bd2f3c7fe1d9be8c4/CVE-2024-37783.txt

Sources: CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.

Look up another CVE Check your dependencies Scan a website