Security Advisory

CVE-2024-10286

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-10-23 12:01:40
Last updated 2024-10-23 13:00:28
Assigner INCIBE
State PUBLISHED

Description

Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /testmail/index.php, parameter to.