CVE-2024-8413

Description

Cross Site Scripting (XSS) vulnerability through the action parameter in index.php. Affected product codebase https://github.com/Bioshox/Raspcontrol and forks such as https://github.com/harmon25/raspcontrol . An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload to an authenticated user and partially hijacking their session details. References list

Reserved 2024-09-04 | Published 2024-09-04 | Updated 2024-09-04 | Assigner INCIBE

Problem types

CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

Product status

Default status
unaffected

1.0
affected

Credits

Rafael Pedrero finder

References

www.incibe.es/.../aviso/cross-site-scripting-xss-raspcontrol

cve.org (CVE-2024-8413)

nvd.nist.gov (CVE-2024-8413)

Download JSON