CVE-2024-0318

Cross-Site Scripting in FireEye HXTool

Summary

Original description

The description as published by the source.

Cross-Site Scripting in FireEye HXTool affecting version 4.6. This vulnerability allows an attacker to store a specially crafted JavaScript payload in the 'Profile Name' and 'Hostname/IP' parameters that will be triggered when items are loaded.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web incibe.es

Metadata

CVE: CVE-2024-0318
Published: 2024-01-15
First seen on SecPulse: 2 years ago
First-seen source: OSV.dev (Open Source Vulnerabilities)

CWE

CWE-79

Detection sources

OSV.dev (Open Source Vulnerabilities) 2 months ago