SpringBootCMS Vulnerability: Cross Site Scripting (XSS) Attack Possible Remotely
CVE-2024-6539

4.8MEDIUM

Key Information:

Vendor

heyewei

Status
Springbootcms
Vendor
CVE Published:
7 July 2024

What is CVE-2024-6539?

A vulnerability classified as problematic has been found in heyewei SpringBootCMS up to 2024-05-28. Affected is an unknown function of the file /guestbook of the component Guestbook Handler. The manipulation of the argument Content leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-270450 is the identifier assigned to this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://vuldb.com/?id.270450
https://vuldb.com/?ctiid.270450
https://gitee.com/heyewei/SpringBootCMS/issues/IA9D7F

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

JSON
.