Beveiligingsadvies

CVE-2024-46226

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-02-26 00:00:00
Laatst bijgewerkt 2025-02-26 15:49:02
Toegewezen door mitre
CVSS-score 4.8
Status PUBLISHED

Beschrijving

A stored cross site scripting (XSS) vulnerability in HelpDeskZ < v2.0.2 allows remote attackers to execute arbitrary JavaScript in the administration panel by including a malicious payload into the file name and upload file function when creating a new ticket.