CVE-2024-32492: Code Injection
Published Apr 29, 2024
·Updated
An issue was discovered in Znuny 7.0.1 through 7.0.16 where the ticket detail view in the customer front allows the execution of external JavaScript.
Affected Software
2 affected components
Znuny Znuny>=7.0.1<=7.0.16
Znuny Znuny>=7.0.1<=7.0.16
Event History
Apr 29, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-32492?
CVE-2024-32492 is considered a high-severity vulnerability due to the potential for executing external JavaScript in the ticket detail view.
2
How do I fix CVE-2024-32492?
To mitigate CVE-2024-32492, it is recommended to upgrade Znuny to a version higher than 7.0.16.
3
What are the affected versions for CVE-2024-32492?
CVE-2024-32492 affects Znuny versions 7.0.1 through 7.0.16.
4
What type of vulnerability is CVE-2024-32492?
CVE-2024-32492 is a Cross-Site Scripting (XSS) vulnerability that allows the execution of external JavaScript.
5
Is user data at risk due to CVE-2024-32492?
Yes, user data may be at risk as attackers could inject malicious JavaScript into ticket views.