Beveiligingsadvies

CVE-2024-10288

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-10-23 12:03:10

Laatst bijgewerkt 2024-10-23 12:59:41

Toegewezen door INCIBE

CVSS-score 6.1

Status PUBLISHED

Beschrijving

Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/SubscribeToList, parameter ListName.

← Alle CVE's bekijken Bekijk op cve.org ↗