CVE-2024-37773

Name of the Vulnerable Software and Affected Versions Sunbird DCIM dcTrack version 9.1.2

Description An HTML injection issue allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen. This can be exploited by attackers with administrative access to inject malicious HTML code.

Recommendations For Sunbird DCIM dcTrack version 9.1.2, consider restricting access to the admin screen until a patch is available. As a temporary workaround, limit the ability of administrators to inject HTML code in the admin panel to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.