CVE-2024-25976
CVSS V2 None
CVSS V3 None
Description
When LDAP authentication is activated in the configuration it is possible to obtain reflected XSS execution by creating a custom URL that the victim only needs to open in order to execute arbitrary JavaScript code in the victim's browser. This is due to a fault in the file login.php where the content of "$_SERVER['PHP_SELF']" is reflected into the HTML of the website. Hence the attacker does not need a valid account in order to exploit this issue.
Overview
- CVE ID
- CVE-2024-25976
- Assigner
- SEC-VLab
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-05-29T12:22:46.526Z
- Last Modified Date
- 2024-05-29T13:14:11.049Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://r.sec-consult.com/hawki | third-party-advisory |
| https://github.com/HAWK-Digital-Environments/HAWKI/commit/146967f3148e92d1640ffebc21d8914e2d7fb3f1 | patch |
| http://seclists.org/fulldisclosure/2024/May/34 |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-25976 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25976 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-06-26 12:22:30 | Added to TrackCVE |