CVE-2024-33548

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Apr 29, 2024
CWE ID 79

Summary

CVE-2024-33548 is a vulnerability categorized as CWE-79, which refers to the improper neutralization of input during web page generation (cross-site scripting). This vulnerability affects AA-Team WZone versions up to 14.0.10. It allows for reflected cross-site scripting (XSS) attacks. The exploitability score for this vulnerability is 2.8 out of 10, with a base severity rating of high at 7.1 out of 10. The impact score is 3.7 out of 10, indicating low integrity and confidentiality impacts. The attack vector is through the network, with no privileges required and user interaction being required as well. Remediation steps should be taken to address this vulnerability as it poses a potential danger to organizations using the affected AA-Team WZone versions by allowing malicious actors to inject and execute arbitrary scripts on their websites, leading to various security risks.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-33548 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options