CVE-2024-12021: Stored Cross-Site Scripting
Coverity versions prior to 2024.9.0 are vulnerable to stored cross-site scripting (XSS) in various administrative interfaces. The impact of exploitation may result in the compromise of local accounts managed by the Coverity platform as well as other standard impacts resulting from cross-site scripting.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12021?
The severity of CVE-2024-12021 is classified as high due to the potential for stored cross-site scripting (XSS) attacks.
How do I fix CVE-2024-12021?
To fix CVE-2024-12021, upgrade to Coverity version 2024.9.0 or later.
What systems are affected by CVE-2024-12021?
CVE-2024-12021 affects all versions of Coverity prior to 2024.9.0.
What are the consequences of exploiting CVE-2024-12021?
Exploiting CVE-2024-12021 can lead to the compromise of local accounts and other standard impacts associated with XSS vulnerabilities.
How can I mitigate risks associated with CVE-2024-12021 before applying fixes?
Mitigating risks from CVE-2024-12021 can include restricting access to the administrative interfaces and monitoring for unusual account activity.