PT-2024-22292 · Image Access Gmbh · Scan2Net

Daniel Hirschberger + 1 · Published 2024-12-12 · Updated 2024-12-12 · CVE-2024-28142

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue is due to missing input sanitization, allowing an attacker to perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The "File Name" page (/cgi/uset.cgi?-cfilename) in the User Settings menu improperly filters the file name and wildcard character input field. By exploiting the wildcard character feature, attackers can store arbitrary Javascript code which is triggered if the page is viewed afterwards, e.g., by higher privileged users such as admins. This attack can even be performed without being logged in because the affected functions are not fully protected. Without logging in, only the file name parameter of the "Default" User can be changed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-28142

Affected Products

Scan2Net

References · 7

• https://imageaccess.de/?page=SupportPortal&lang=en · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-28142 · Security Note
• https://twitter.com/CVEnew/status/1867286513832390893 · Twitter Post
• https://r.sec-consult.com/imageaccess · Note
• http://seclists.org/fulldisclosure/2024/Dec/2 · Note
• https://t.me/cvenotify/104024 · Telegram Post
• https://t.me/cvedetector/12787 · Telegram Post