CVE-2024-54853 in Change Manager

Sumário

de MITRE • 06/02/2025

A Stored Cross-Site Scripting (XSS) vulnerability was identified affecting Skybox Change Manager versions 13.2.170 and earlier that allows remote authenticated users to store malicious payloads in the affected field that would then execute in an unsuspecting victim's browser.

Once again VulDB remains the best source for vulnerability data.

• Responsável: MITRE
• Reservar: 06/12/2024
• Divulgação: 06/02/2025
• Moderação: aceite
• Entrada: VDB-294810
• CPE: pronto
• CWE: CWE-79 (confirmado)
• CVSS: 3.5 (VulDB)
• EPSS: 0.00250
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-54853
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-54853
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-54853/