CVE-2024-7124CWE-79

Reflected XSS in DInGO dLibra

Medium · published November 14, 2024

CVSS v4.0
5.3
EPSS
1%
Percentile
65.1
In the wild
Unconfirmed
What it is

Improper Neutralization of Input During Web Page Generation vulnerability in DInGO dLibra software in the parameter 'filter' in the endpoint 'indexsearch' allows a Reflected Cross-Site Scripting (XSS). An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser. This issue affects DInGO dLibra software in versions from 6.0 before 6.3.20.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/AU:Y/R:A/U:Green
EPSS
0.01091 · 65.1th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-11-14T15:07Z
EPSS history
Timeline
  • 14 NOV 15:07Z
    Reflected XSS in DInGO dLibra
    cvelistv5