Lucene search
HistoryMay 14, 2024 - 3:42 p.m.
CVE-2024-3796
wbsairback
cross-site scripting
remote user
session data
exploitation
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
9.0%
Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting (XSS) through /admin/BackupSchedule, description field. Exploitation of this vulnerability could allow a remote user to send a specially crafted URL to the victim and steal their session data.
Related
cve
cve
CVE-2024-3796
2024-05-14 15:42:20
vulnrichment
vulnrichment
CVE-2024-3796 Cross-site Scripting vulnerability in WBSAirback
2024-04-15 14:15:20
cvelist
cvelist
CVE-2024-3796 Cross-site Scripting vulnerability in WBSAirback
2024-04-15 14:15:20
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-3796