CVE-2024-37622

Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the num parameter at /flow/flow.php.
CVSS

No CVSS.

References
Link Resource
https://github.com/rainrocka/xinhu/issues/4 Exploit Issue Tracking Vendor Advisory
https://github.com/rainrocka/xinhu/issues/4 Exploit Issue Tracking Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:rockoa:xinhu:2.6.3:*:*:*:*:*:*:*

History

30 Apr 2025, 23:53

Type Values Removed Values Added
CPE cpe:2.3:a:rockoa:xinhu:2.6.3:*:*:*:*:*:*:*
First Time Rockoa
Rockoa xinhu
References () https://github.com/rainrocka/xinhu/issues/4 - () https://github.com/rainrocka/xinhu/issues/4 - Exploit, Issue Tracking, Vendor Advisory

17 Jun 2024, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-06-17 14:15

Updated : 2025-04-30 23:53


NVD link : CVE-2024-37622

Mitre link : CVE-2024-37622


JSON object : View

Products Affected

rockoa

  • xinhu
CWE

No CWE.