Beveiligingsadvies

CVE-2024-0640

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-03-20 10:10:52

Laatst bijgewerkt 2025-03-20 14:25:04

Toegewezen door @huntr_ai

CVSS-score 5.6

Status PUBLISHED

Beschrijving

A stored cross-site scripting (XSS) vulnerability exists in chatwoot/chatwoot versions 3.0.0 to 3.5.1. This vulnerability allows an admin user to inject malicious JavaScript code via the dashboard app settings, which can then be executed by another admin user when they access the affected dashboard app. The issue is fixed in version 3.5.2.

← Alle CVE's bekijken Bekijk op cve.org ↗