CVE-2024-44797: XSS
A cross-site scripting (XSS) vulnerability in the component /managers/enablerequests.php of Gazelle commit 63b3370 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the view parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-44797?
The severity of CVE-2024-44797 is classified as medium due to the potential for exploitation via cross-site scripting.
How do I fix CVE-2024-44797?
To fix CVE-2024-44797, validate and sanitize all user inputs before processing the 'view' parameter in /managers/enable_requests.php.
What software versions are affected by CVE-2024-44797?
CVE-2024-44797 affects all versions of Gazelle prior to 2016-11-08.
What type of vulnerability is CVE-2024-44797?
CVE-2024-44797 is a cross-site scripting (XSS) vulnerability that allows attackers to execute arbitrary scripts.
Can CVE-2024-44797 be exploited remotely?
Yes, CVE-2024-44797 can be exploited remotely by an attacker with knowledge of the crafted payload targeting the affected component.