CVE-2024-21984

CVSS 3.1 Score 5.9 of 10 (medium)

Details

Published Feb 16, 2024
Updated: Feb 20, 2024
CWE ID 79

Summary

CVE-2024-21984 is a vulnerability found in StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8. This vulnerability is classified as a Reflected Cross-Site Scripting (XSS) vulnerability that can be difficult to exploit. To successfully exploit this vulnerability, the attacker must have specific information about the target instance and trick a privileged user into clicking a specially crafted link. If successful, the attacker could potentially view or modify configuration settings, as well as add or modify user accounts. The base severity of this vulnerability is considered medium, with an impact score of 4.2 out of 10. It requires network access and user interaction, but does not require any privileges from the attacker. The confidentiality impact is low, while the integrity impact is high. The vulnerability has no availability impact and can be remediated by updating StorageGRID to version 11.8 or newer.

Leverage our Vulnerability Intelligence module to secure your systems now - get detailed insights on CVE-2024-37364. Book your demo today.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-21984 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options