Webswing 23.2.2 allows remote attackers to modify client-side JavaScript code to achieve path traversal, likely leading to remote code execution via modification of shell scripts on the server.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://herolab.usd.de/security-advisories/usd-2024-0008/ | Exploit Third Party Advisory |
Configurations
History
10 Jul 2025, 19:35
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Webswing
Webswing webswing |
|
| References | () https://herolab.usd.de/security-advisories/usd-2024-0008/ - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:webswing:webswing:23.2.2:*:*:*:-:*:*:* |
31 Oct 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-31 19:15
Updated : 2025-07-10 19:35
NVD link : CVE-2024-39332
Mitre link : CVE-2024-39332
JSON object : View
Products Affected
webswing
- webswing
CWE
No CWE.