CVE-2024-45799

{"id": "CVE-2024-45799", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 3.9}]}, "published": "2024-09-16T19:16:10.880", "references": [{"url": "https://github.com/rathena/FluxCP/security/advisories/GHSA-xvqv-25vf-88g4", "source": "security-advisories@github.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-200"}, {"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "FluxCP is a web-based Control Panel for rAthena servers written in PHP. A javascript injection is possible via venders/buyers list pages and shop names, that are currently not sanitized. This allows executing arbitrary javascript code on the user's browser just by visiting the shop pages. As a result all logged in to fluxcp users can have their session info stolen. This issue has been addressed in release version 1.3. All users are advised to upgrade. There are no known workarounds for this vulnerability."}, {"lang": "es", "value": "FluxCP es un panel de control basado en la web para servidores rAthena escrito en PHP. Es posible realizar una inyecci\u00f3n de JavaScript a trav\u00e9s de las p\u00e1ginas de listas de vendedores/compradores y los nombres de las tiendas, que actualmente no est\u00e1n desinfectadas. Esto permite ejecutar c\u00f3digo JavaScript arbitrario en el navegador del usuario con solo visitar las p\u00e1ginas de la tienda. Como resultado, todos los usuarios que hayan iniciado sesi\u00f3n en FluxCP pueden sufrir el robo de la informaci\u00f3n de su sesi\u00f3n. Este problema se ha solucionado en la versi\u00f3n 1.3. Se recomienda a todos los usuarios que actualicen la versi\u00f3n. No existen workarounds para esta vulnerabilidad."}], "lastModified": "2024-09-20T12:31:20.110", "sourceIdentifier": "security-advisories@github.com"}