PT-2024-31848 · Solvait · Solvait

Abdulwahab Alismaeel · Published 2024-09-30 · Updated 2024-10-04 · CVE-2024-45920

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Solvait version 24.4.2

Description A Stored Cross-Site Scripting (XSS) vulnerability allows remote attackers to inject malicious scripts into the application due to insufficient input validation and sanitization in the "Intrest" feature.

Recommendations For Solvait version 24.4.2, consider disabling the "Intrest" feature until a patch is available to prevent exploitation of the Stored Cross-Site Scripting (XSS) vulnerability.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-45920

Affected Products

Solvait

References · 7

• 🔥 https://gist.github.com/ipxsec/10526db2cbfcb899a70dcb8f0ee53a99 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-45920 · Security Note
• https://osv.dev/vulnerability/CVE-2024-45920 · Vendor Advisory
• https://t.me/cvedetector/6649 · Telegram Post
• https://t.me/cvenotify/97029 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1840760901089079360 · Twitter Post
• https://twitter.com/CVEnew/status/1840740574518718679 · Twitter Post