CVE-2024-49211: XSS
Reflected XSS was discovered in a Dashboard Listing Archer Platform UX page in Archer Platform 6.x before version 2024.08. A remote unauthenticated attacker could potentially exploit this by tricking a victim application user into supplying malicious HTML or JavaScript code to the vulnerable web application; the malicious code is then reflected back to the victim and executed by the web browser in the context of the vulnerable web application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49211?
CVE-2024-49211 is considered a high severity vulnerability due to its potential for remote exploitation and reflected cross-site scripting.
How do I fix CVE-2024-49211?
To fix CVE-2024-49211, upgrade to Archer Platform version 2024.08 or later.
Who can exploit CVE-2024-49211?
CVE-2024-49211 can be exploited by a remote unauthenticated attacker targeting a vulnerable web application.
What type of vulnerability is CVE-2024-49211?
CVE-2024-49211 is a reflected cross-site scripting (XSS) vulnerability.
In which versions of Archer Platform is CVE-2024-49211 present?
CVE-2024-49211 affects Archer Platform 6.x versions prior to 2024.08.