CVE-2024-47158CWE-94

N-LINE 2.0.6 and prior versions contain a code injection vulnerability

High · published October 25, 2024

CVSS v3.0
7.4
EPSS
0%
Percentile
14.1
In the wild
Unconfirmed
What it is

N-LINE 2.0.6 and prior versions contain a code injection vulnerability. If this vulnerability is exploited, arbitrary code may be executed on the instructor's browser, or the instructor may be directed to a malicious website.

The record
Technical detail
CVSS v3.0
7.4 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00238 · 14.1th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2024-10-25T07:59Z
EPSS history
Timeline
  • 25 OCT 07:59Z
    N-LINE 2.0.6 and prior versions contain a code injection vulnerability
    cvelistv5