Vulnerability CVE-2024-49397


Published: 2024-10-17

Description:
The affected product is vulnerable to a cross-site scripting attack which may allow an attacker to bypass authentication and takeover admin accounts.

Type:

CWE-79

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

 References:
https://www.cisa.gov/news-events/ics-advisories/icsa-24-291-01

Copyright 2024, cxsecurity.com

 

Back to Top