CVE-2024-2727

CVSS V2 None CVSS V3 None

Description

HTML injection vulnerability affecting the CIGESv2 system, which allows an attacker to inject arbitrary code and modify elements of the website and email confirmation message.

Overview

CVE ID
CVE-2024-2727

Assigner
INCIBE

Vulnerability Status
PUBLISHED

Published Version
2024-03-22T13:36:35.270Z

Last Modified Date
2024-03-22T13:36:35.270Z

Weakness Enumerations

CWE	URL
CWE-79	http://cwe.mitre.org/data/definitions/79.html

References

Reference URL	Reference Tags
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cigesv2-system

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-2727
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2727

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 23:51:14				Added to TrackCVE