A cross-site scripting (XSS) vulnerability in the component \bean\Manager.java of Drug v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user parameter.
References
| Link | Resource |
|---|---|
| https://kaput-raptorex-7c1.notion.site/drug-1-0-DOM-based-cross-site-scripting-fae620f769304f67a7488a961d048672 | Exploit Third Party Advisory |
Configurations
History
12 Sep 2024, 16:17
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
| References | () https://kaput-raptorex-7c1.notion.site/drug-1-0-DOM-based-cross-site-scripting-fae620f769304f67a7488a961d048672 - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:deathbreak:drug:1.0:*:*:*:*:*:*:* | |
| First Time |
Deathbreak drug
Deathbreak |
|
| CWE | CWE-79 |
06 Sep 2024, 14:35
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-09-06 14:15
Updated : 2024-09-12 16:17
NVD link : CVE-2024-44837
Mitre link : CVE-2024-44837
JSON object : View
Products Affected
deathbreak
- drug
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')