CVE-2024-9198

Vulnerability in Clibo Manager v1.1.9.1 that could allow an attacker to execute an stored Cross-Site Scripting (stored XSS ) by uploading a malicious .svg image in the section: Profile > Profile picture.
Configurations

Configuration 1 (hide)

cpe:2.3:a:clibomanager:clibo_manager:1.1.9.1:*:*:*:*:*:*:*

History

02 Oct 2024, 14:33

Type Values Removed Values Added
CPE cpe:2.3:a:clibomanager:clibo_manager:1.1.9.1:*:*:*:*:*:*:*
First Time Clibomanager
Clibomanager clibo Manager
References () https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-clibo-manager - () https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-clibo-manager - Vendor Advisory
CVSS v2 : unknown
v3 : 7.6
v2 : unknown
v3 : 5.4

26 Sep 2024, 13:32

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad en Clibo Manager v1.1.9.1 que podría permitir a un atacante ejecutar un Cross-Site Scripting almacenado (XSS almacenado) al cargar una imagen .svg maliciosa en la sección: Perfil > Foto de perfil.

26 Sep 2024, 10:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-09-26 10:15

Updated : 2024-10-02 14:33


NVD link : CVE-2024-9198

Mitre link : CVE-2024-9198

CVE.ORG link : CVE-2024-9198


JSON object : View

Products Affected

clibomanager

  • clibo_manager
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')