Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-1304

Опубликовано: 12 мар. 2024
Источник: nvd
CVSS3: 6.3
CVSS3: 6.1
EPSS Низкий

Описание

Cross-site scripting vulnerability in Badger Meter Monitool that affects versions up to 4.6.3 and earlier. This vulnerability allows a remote attacker to send a specially crafted javascript payload to an authenticated user and partially hijack their browser session.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:badgermeter:monitool:*:*:*:*:*:*:*:*
Версия до 4.7 (исключая)

EPSS

Процентиль: 24%
0.00083
Низкий

6.3 Medium

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.3
github
почти 2 года назад

Cross-site scripting vulnerability in Badger Meter Monitool that affects versions up to 4.6.3 and earlier. This vulnerability allows a remote attacker to send a specially crafted javascript payload to an authenticated user and partially hijack their browser session.

EPSS

Процентиль: 24%
0.00083
Низкий

6.3 Medium

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-79