CVE-2024-40510

Name of the Vulnerable Software and Affected Versions openPetra version 2023.02

Description The issue allows a remote attacker to obtain sensitive information via the serverMCommon.asmx function. This is a Cross Site Scripting vulnerability.

Recommendations For openPetra version 2023.02, as a temporary workaround, consider disabling the serverMCommon.asmx function until a patch is available. Restrict access to this function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.