CVE-2024-6252

A vulnerability has been found in Zorlan SkyCaiji up to 2.8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Task Handler. The manipulation of the argument onerror leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269419.
References
Link Resource
https://vuldb.com/?id.269419 Permissions Required VDB Entry
https://vuldb.com/?ctiid.269419 Permissions Required VDB Entry
https://vuldb.com/?submit.355783 Third Party Advisory VDB Entry
https://fushuling.com/index.php/2024/06/13/test2/ Broken Link
Configurations

Configuration 1 (hide)

cpe:2.3:a:skycaiji:skycaiji:*:*:*:*:*:*:*:*

History

19 Sep 2024, 16:51

Type Values Removed Values Added
CPE cpe:2.3:a:skycaiji:skycaiji:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.1
First Time Skycaiji skycaiji
Skycaiji
References () https://vuldb.com/?submit.355783 - () https://vuldb.com/?submit.355783 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?ctiid.269419 - () https://vuldb.com/?ctiid.269419 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.269419 - () https://vuldb.com/?id.269419 - Permissions Required, VDB Entry
References () https://fushuling.com/index.php/2024/06/13/test2/ - () https://fushuling.com/index.php/2024/06/13/test2/ - Broken Link

22 Jun 2024, 12:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-06-22 12:15

Updated : 2024-09-19 16:51


NVD link : CVE-2024-6252

Mitre link : CVE-2024-6252


JSON object : View

Products Affected

skycaiji

  • skycaiji
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')