CVE-2024-2276: Bdtask G-Prescription Gynaecology & OBS Consultation Software Edit Venue Page cross site scripting

Published Mar 8, 2024

Updated

A vulnerability has been found in Bdtask G-Prescription Gynaecology & OBS Consultation Software 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Venuecontroller/editvenue/ of the component Edit Venue Page. The manipulation of the argument Venue map leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-256045 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

2 affected components

BDTASK G-Prescription Gynaecology & OBS Consultation Software

BDTASK G-prescription Gynaecology \& Obs Consultation=1.0

Event History

Mar 8, 2024

CVE Published

via MITRE·12:31 AM

Data Sourced

via MITRE·12:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-2276?

CVE-2024-2276 is classified as problematic due to vulnerabilities in the Edit Venue Page functionality.

How do I fix CVE-2024-2276?

Fixing CVE-2024-2276 requires applying patches provided by the vendor or implementing proper input validation on the affected component.

What software is affected by CVE-2024-2276?

CVE-2024-2276 affects version 1.0 of Bdtask G-Prescription Gynaecology & OBS Consultation Software.

What functionality is vulnerable in CVE-2024-2276?

The vulnerability in CVE-2024-2276 is found in the Edit Venue Page functionality of the software.

Can CVE-2024-2276 lead to data manipulation?

Yes, CVE-2024-2276 can potentially allow unauthorized manipulation of data through the vulnerable component.