CVE-2024-24571
Assigner: GitHub_M
Published: 2024-01-31T22:32:51.646Z
State: PUBLISHED
title: facileManager Systemic Cross-Site Scripting (XSS)
problemTypes: descriptions: cweId: CWE-80
description: CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
type: CWE
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
version: 3.1
affected: vendor: WillyXJ
product: facileManager
versions: version: <= 4.5.0
status: affected
descriptions: value: facileManager is a modular suite of web apps built with the sysadmin in mind. For the facileManager web application versions 4.5.0 and earlier, we have found that XSS was present in almost all of the input fields as there is insufficient input validation.
source: advisory: GHSA-h7w3-xv88-2xqj
discovery: UNKNOWN