CVE-2024-10289mediumCWE-79

CVE-2024-10289: falha de média gravidade em LocalServer

Cross-Site Scripting (XSS) vulnerability in LocalServer

Publicada em

Seguir esta CVE+ Monitorar LocalServer

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.1epss 0.3%
Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/ManageSubscription, parameter MSubListName.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
LocalServer · LocalServer
CVEs relacionadas — LocalServer

No mesmo produto, das mais perigosas para as menos.

CVE-2024-10288MEDIUMCross-Site Scripting (XSS) vulnerability in LocalServerEPSS 0.3%CVE-2024-10287MEDIUMCross-Site Scripting (XSS) vulnerability in LocalServerEPSS 0.3%CVE-2024-10286MEDIUMCross-Site Scripting (XSS) vulnerability in LocalServerEPSS 0.3%