CVE-2024-51322

Summary

Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /jsp/home.jsp, /jsp/gsfr_feditorHTML.jsp, /servlet/SPVisualZoom, /jsp/gsmd_container.jsp components

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

Additional References

• https://members.backbox.org/zucchetti-ad-hoc-infinity-multiple-vulnerabilities/

References

• https://members.backbox.org/zucchetti-ad-hoc-infinity-multiple-vulnerabilities/

• ←Previous
• Next→