Cross Site Scripting Vulnerability in Gnuboard G6
CVE-2024-24157

6.1MEDIUM

Key Information:

Vendor

Gnuboard

Vendor
CVE Published:
14 May 2024

What is CVE-2024-24157?

A vulnerability exists in the Gnuboard G6 product that permits an attacker to leverage Cross Site Scripting (XSS) through a flaw in the board.py script. This vulnerability can enable unauthorized access to user data, allowing for potentially significant exploitation by attackers if not addressed. Proper validation and sanitization of user inputs are critical in mitigating these risks, and updates to secure the application against this issue are strongly recommended.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/gnuboard/g6/issues/314

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

JSON
.