CVE-2024-25831 Vulnerability Details

Record summary

CVE-2024-25831 has a selected CVSS score of 6.1 (medium).

Description

F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS) vulnerability due to improper input sanitization. An authenticated, remote attacker can execute arbitrary JavaScript code in the web management interface.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationPoC

AutomatableNo

Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 20, 2024 · Source: CVE List

Affected products and versions

Product	Source	Version range	Status
datacube3 Browse f-logic / datacube3 Default status: unknown	CVE List	1.0	affected

References

neroteam.com

https://neroteam.com/blog/f-logic-datacube3-vulnerability-report

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2024-25831