CVE-2020-24701
CVE-2020-24701
Vexday Risk Score
18Low
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 6.8%KEV nãoPoC —Nuclei simMetasploit —Patch —
Lifecycle
12 Jan 2021Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
OX App Suite through 7.10.4 allows XSS via the app loading mechanism (the PATH_INFO to the /appsuite URI).
Affected products
n/a · n/a