Security Advisory

CVE-2024-50857

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-01-14 00:00:00
Last updated 2025-01-15 20:04:28
Assigner mitre
State PUBLISHED

Description

The ip_do_job request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting (XSS). It allows data exfiltration and enables CSRF attacks. The vulnerability requires specific user permissions within the application to exploit successfully.