Stored Cross-Site Scripting Vulnerability in Coverity by Synopsys
CVE-2024-12021

8.5HIGH

Key Information:

Vendor

Black Duck

Status
Coverity
Vendor
CVE Published:
31 March 2025

What is CVE-2024-12021?

Coverity versions before 2024.9.0 contain a vulnerability that allows for stored cross-site scripting (XSS) through various administrative interfaces. If exploited, this vulnerability may lead to unauthorized access and compromise of local accounts managed by the Coverity platform, along with other potential risks associated with XSS attacks. Users are advised to upgrade to the latest version to mitigate the risk. For further information, refer to the official advisory.

Affected Version(s)

Coverity Windows 0 < 2024.9.0

References

https://community.blackduck.com/s/article/Black-Duck-Prod...
vendor-advisory

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jozef Frantisek Stefanovic
.