CVE-2024-45960

Zenario 9.7.61188 allows authenticated admin users to upload PDF files containing malicious code into the target system

Medium · published October 2, 2024

CVSS v3.1
4.8
EPSS
0%
Percentile
29.0
In the wild
Unconfirmed
What it is

Zenario 9.7.61188 allows authenticated admin users to upload PDF files containing malicious code into the target system. If the PDF file is accessed through the website, it can trigger a Cross Site Scripting (XSS) attack.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00364 · 29.0th percentile
Published
2024-10-02T00:00Z
EPSS history
Timeline
  • 02 OCT 00:00Z
    Zenario 9.7.61188 allows authenticated admin users to upload PDF files containing malicious code into the target system
    cvelistv5