Vulnerability Details CVE-2024-42055
Cervantes through 0.5-alpha allows stored XSS.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 5.7%
CVSS Severity
CVSS v3 Score 5.4
References
- https://github.com/CervantesSec/cervantes/commit/78631a034d0fb3323a53fb7428b2022b29a0d2cd
- https://www.getastra.com/blog/vulnerability/xss-insecure-file-cervantes/
- https://www.jinsonvarghese.com/stored-xss-file-upload-vulnerabilities-found-in-cervantes/
- https://github.com/CervantesSec/cervantes/commit/78631a034d0fb3323a53fb7428b2022b29a0d2cd
- https://www.getastra.com/blog/vulnerability/xss-insecure-file-cervantes/
- https://www.jinsonvarghese.com/stored-xss-file-upload-vulnerabilities-found-in-cervantes/
Products affected by CVE-2024-42055
-
cpe:2.3:a:cervantessec:cervantes:0.3
-
cpe:2.3:a:cervantessec:cervantes:0.4
-
cpe:2.3:a:cervantessec:cervantes:0.5