CVE-2024-37675

Name of the Vulnerable Software and Affected Versions Tessi Docubase Document Management product versions 5.x

Description The issue allows a remote attacker to execute arbitrary code via the parameter sectionContent related to the functionality of adding notes to an uploaded file. This is a Cross Site Scripting vulnerability.

Recommendations For Tessi Docubase Document Management product version 5.x, consider disabling the functionality of adding notes to an uploaded file until a patch is available. Restrict access to the sectionContent parameter to minimize the risk of exploitation.