CVE-2024-0318
Cross-Site Scripting in FireEye HXTool
概要
Cross-Site Scripting in FireEye HXTool
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Cross-Site Scripting in FireEye HXTool affecting version 4.6. This vulnerability allows an attacker to store a specially crafted JavaScript payload in the 'Profile Name' and 'Hostname/IP' parameters that will be triggered when items are loaded.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web incibe.es