CVE-2024-49210: XSS
Reflected XSS was discovered in an iView List Archer Platform UX page in Archer Platform 6.x before version 2024.09. A remote unauthenticated attacker could potentially exploit this by tricking a victim application user into supplying malicious HTML or JavaScript code to the vulnerable web application; the malicious code is then reflected back to the victim and executed by the web browser in the context of the vulnerable web application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49210?
CVE-2024-49210 is a reflected XSS vulnerability that allows remote unauthenticated attackers to potentially execute malicious scripts.
How do I fix CVE-2024-49210?
To fix CVE-2024-49210, upgrade to Archer Platform version 2024.09 or later.
What software is affected by CVE-2024-49210?
CVE-2024-49210 affects the Archer Platform 6.x prior to version 2024.09.
Can CVE-2024-49210 be exploited remotely?
Yes, CVE-2024-49210 can be exploited remotely by attackers if the victim is tricked into executing malicious code.
What type of vulnerability is CVE-2024-49210?
CVE-2024-49210 is classified as a reflected cross-site scripting (XSS) vulnerability.