mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-06-07 05:28:59 +00:00
24 lines
1.1 KiB
JSON
24 lines
1.1 KiB
JSON
{
|
|
"id": "CVE-2024-27593",
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
"published": "2024-05-15T17:15:10.290",
|
|
"lastModified": "2024-05-15T18:35:11.453",
|
|
"vulnStatus": "Awaiting Analysis",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "A stored cross-site scripting (XSS) vulnerability in the Filter function of Eramba Version 3.22.3 Community Edition allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the filter name field. This vulnerability has been fixed in version 3.23.0."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Una vulnerabilidad de cross-site scripting (XSS) almacenado en la funci\u00f3n de filtro de Eramba Versi\u00f3n 3.22.3 Community Edition permite a atacantes autenticados ejecutar script web o HTML de su elecci\u00f3n a trav\u00e9s de un payload manipulado inyectado en el campo de nombre del filtro. Esta vulnerabilidad se ha solucionado en la versi\u00f3n 3.23.0."
|
|
}
|
|
],
|
|
"metrics": {},
|
|
"references": [
|
|
{
|
|
"url": "https://blog.smarttecs.com/posts/2024-002-cve-2024-27593/",
|
|
"source": "cve@mitre.org"
|
|
}
|
|
]
|
|
} |