Beveiligingsadvies

CVE-2024-41805

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-07-26 14:51:02

Laatst bijgewerkt 2024-08-02 04:46:52

Toegewezen door GitHub_M

CVSS-score 6.1

Status PUBLISHED

Beschrijving

Tracks, a Getting Things Done (GTD) web application, is vulnerable to reflected cross-site scripting in versions prior to 2.7.1. Reflected cross-site scripting enables execution of malicious JavaScript in the context of a user’s browser if that user clicks on a malicious link, allowing phishing attacks that could lead to credential theft. Tracks version 2.7.1 is patched. No known complete workarounds are available.

← Alle CVE's bekijken Bekijk op cve.org ↗