Beveiligingsadvies

CVE-2024-3801

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-06-28 12:44:38
Laatst bijgewerkt 2024-10-30 15:49:56
Toegewezen door CERT-PL
CVSS-score 6.1
Status PUBLISHED

Beschrijving

Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in one of GET header parameters.  Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears.