PT-2024-33044 · Mipjz · Mipjz

Lvzcho · Published 2024-10-25 · Updated 2024-10-30 · CVE-2024-48233

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions mipjz version 5.0.5

Description The issue concerns a Cross Site Scripting (XSS) problem. It is related to the ICP parameter in the appsettingcontrollerApiAdminSetting.php file.

Recommendations For version 5.0.5, avoid using the ICP parameter in the affected file until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-48233

Affected Products

Mipjz

References · 4

• 🔥 https://github.com/sansanyun/mipjz/issues/16 · Exploit
• https://osv.dev/vulnerability/CVE-2024-48233 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-48233 · Security Note
• https://t.me/cvedetector/8983 · Telegram Post