CVE-2024-46083
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Oct 1, 2024
Updated: Oct 4, 2024
CWE ID 79
Summary
CVE-2024-46083 is a Cross Site Scripting (XSS) vulnerability affecting Scriptcase v9.10.023 and earlier versions. An authenticated user can exploit the messages feature to inject malicious code into any user's account on the platform. This issue poses a significant risk as regular users can trigger actions for administrator accounts, potentially leading to serious security breaches. It is crucial that affected organizations apply the necessary patches or upgrades to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Scriptcase
Affected Vendors
- Scriptcase