CVE-2024-24571

facileManager Systemic Cross-Site Scripting (XSS)

CVSS 5.4 MEDIUMEPSS 0.4%CWE-80

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 5.4EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

31 jan 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

facileManager is a modular suite of web apps built with the sysadmin in mind. For the facileManager web application versions 4.5.0 and earlier, we have found that XSS was present in almost all of the input fields as there is insufficient input validation.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Produtos afetados

WillyXJ · facileManager

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/WillyXJ/facileManager/commit/0aa850d4b518f10143a4c675142b15caa5872877 https://github.com/WillyXJ/facileManager/security/advisories/GHSA-h7w3-xv88-2xqj