Cross-Site Scripting Vulnerability in ntopng by ntop
CVE-2014-5464
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 23%
What is CVE-2014-5464?
The XSS vulnerability in the nDPI traffic classification library found in ntopng prior to version 1.2.1 enables remote attackers to execute arbitrary web scripts or HTML. This exploitation occurs through an improper handling of the HTTP Host header, potentially impacting users who interact with the affected service. It is essential for users running ntopng to update to the latest version to mitigate risks associated with this vulnerability.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.