Cross Site Scripting Vulnerability in SpringBoot Manager by By-Yexing

CVE-2024-24060

Summary

The SpringBoot Manager version 1.6 is vulnerable to a Cross Site Scripting (XSS) attack through the endpoint /sys/user. This vulnerability allows an attacker to inject malicious scripts into the web application, which can be executed in the context of the affected users' browser sessions. Such exploitation can lead to session hijacking, data theft, and various other security implications for users interacting with the application.

References