CVE-2024-2211 in Gophish

Résumé

par MITRE • 06/03/2024

Cross-Site Scripting stored vulnerability in Gophish affecting version 0.12.1. This vulnerability could allow an attacker to store a malicious JavaScript payload in the campaign menu and trigger the payload when the campaign is removed from the menu.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Réserver: 06/03/2024
• Divulgation: 06/03/2024
• Modérer: accepté
• Entrée: VDB-255892
• CPE: prêt
• CWE: CWE-79 (confirmé)
• CVSS: 6.1 (NVD)
• EPSS: 0.00292
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-2211
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-2211
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-2211/