CVE-2024-27706: XSS
Published Apr 3, 2024
·Updated
Cross Site Scripting vulnerability in Huly Platform v.0.6.202 allows attackers to execute arbitrary code via upload of crafted SVG file to issues.
Affected Software
1 affected component
Huly Platform
Event History
Apr 3, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-27706?
CVE-2024-27706 has a medium severity rating of 6.1.
2
What type of vulnerability is CVE-2024-27706?
CVE-2024-27706 is a Cross Site Scripting (XSS) vulnerability.
3
How do I fix CVE-2024-27706?
To fix CVE-2024-27706, ensure that input validation and sanitization are applied to SVG file uploads.
4
What software is affected by CVE-2024-27706?
CVE-2024-27706 affects Huly Platform version 0.6.202.
5
Can CVE-2024-27706 allow attackers to execute arbitrary code?
Yes, CVE-2024-27706 allows attackers to execute arbitrary code through the upload of crafted SVG files.