CVE-2024-6702

Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage.
Configurations

Configuration 1 (hide)

cpe:2.3:a:pega:infinity:*:*:*:*:*:*:*:*

History

13 Sep 2024, 16:07

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 5.2
v2 : unknown
v3 : 4.8
CPE cpe:2.3:a:pega:infinity:*:*:*:*:*:*:*:*
Summary
  • (es) Las versiones 8.1 hasta Infinity 24.1.2 de Pega Platform están afectadas por una vulnerabilidad de inyección HTML con el atributo Stage.
CWE CWE-79
First Time Pega
Pega infinity
References () https://support.pega.com/support-doc/pega-security-advisory-c24-vulnerability-remediation-note - () https://support.pega.com/support-doc/pega-security-advisory-c24-vulnerability-remediation-note - Permissions Required

12 Sep 2024, 15:18

Type Values Removed Values Added
New CVE

Information

Published : 2024-09-12 15:18

Updated : 2024-09-13 16:07


NVD link : CVE-2024-6702

Mitre link : CVE-2024-6702

CVE.ORG link : CVE-2024-6702


JSON object : View

Products Affected

pega

  • infinity
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')