Security Advisory

CVE-2024-45962

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-10-02 00:00:00
Last updated 2024-10-02 20:35:08
Assigner mitre
State PUBLISHED

Description

October 3.6.30 allows an authenticated admin account to upload a PDF file containing malicious JavaScript into the target system. If the file is accessed through the website, it could lead to a Cross-Site Scripting (XSS) attack or execute arbitrary code via a crafted JavaScript to the target.