CVE-2024-55546

Description

Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below.

Reserved 2024-12-07 | Published 2024-12-10 | Updated 2024-12-10 | Assigner CyberDanube

Problem types

CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

Product status

Default status
unaffected

Any version
affected

Credits

P. Chistè finder

A. Falb finder

M. Selinger finder

M. Suchy finder

P. Oberndorfer finder

P. Maluenda finder

D. Sagl finder

M. Narbeshuber-Spletzer finder

J. Springer finder

P. Riedl finder

C. Hierzer finder

M. Pammer finder

References

cyberdanube.com/...as-multiple-vulnerabilities-in-oring-iap/ third-party-advisory

cve.org (CVE-2024-55546)

nvd.nist.gov (CVE-2024-55546)

Download JSON