CVE-2024-0891

CVSS 3.1 Score 5.4 of 10 (medium)

Details

Published Jan 25, 2024
Updated: May 17, 2024
CWE ID 79

Summary

CVE-2024-0891 is a newly disclosed vulnerability affecting the hongmaple octopus 1.0 software. This issue, which has been declared as problematic, impacts an unspecified functionality. An attacker can exploit this cross-site scripting (XSS) vulnerability by manipulating the argument description with the input <script>alert(document.cookie)</script>. The exploit can be executed remotely, making it a significant threat. Unfortunately, no information is available regarding affected or unaffected releases, as the product does not utilize versioning. The vulnerability identifier is VDB-252044.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share