CVE-2024-6182

CVSS 3.1 Score 5.4 of 10 (medium)

Details

Published Jun 20, 2024
Updated: Aug 19, 2024
CWE ID 79

Summary

CVE-2024-6183 is a newly identified vulnerability affecting EZ-Suite EZ-Partner 5. The issue lies in an unnamed function of the Forgot Password Handler, which can be exploited for basic cross-site scripting attacks. An attacker can execute the manipulation remotely, making it a significant concern. VDB-269154 is the assigned identifier for this vulnerability, and despite early disclosure to the vendor, they have yet to respond.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share