A reflected cross-site scripting (XSS) vulnerability in "Artikel.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "searchindex" parameter.
History

Mon, 07 Oct 2024 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Cadclick
Cadclick cadclick
Weaknesses CWE-79
CPEs cpe:2.3:a:cadclick:cadclick:*:*:*:*:*:*:*:*
Vendors & Products Cadclick
Cadclick cadclick
Metrics cvssV3_1

{'score': 5.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 04 Oct 2024 20:45:00 +0000

Type Values Removed Values Added
References

Fri, 04 Oct 2024 17:30:00 +0000

Type Values Removed Values Added
Description A reflected cross-site scripting (XSS) vulnerability in "Artikel.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "searchindex" parameter.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-10-04T00:00:00

Updated: 2024-10-04T20:39:59.981833

Reserved: 2024-07-18T00:00:00

Link: CVE-2024-41513

cve-icon Vulnrichment

Updated: 2024-10-04T18:25:04.775Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-10-04T18:15:08.220

Modified: 2024-10-07T19:37:10.700

Link: CVE-2024-41513

cve-icon Redhat

No data.