PT-2024-32327
CVE-2024-46995
·
Published
2024-10-24
·
Updated
2024-10-28
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
baserCMS versions prior to 5.1.2
Description
The issue is a cross-site scripting vulnerability in HTTP 400 Bad Request. This allows malicious code to be executed. The estimated number of potentially affected devices is not provided.
Recommendations
For versions prior to 5.1.2, update to version 5.1.2 or later to resolve the issue. As a temporary workaround, consider restricting access to HTTP 400 Bad Request responses until the update is applied.
Found an issue in the description? Have something to add? Feel free to write us 👾