PT-2024-34525 · Pnetlab · Pnetlab

Fatime Zehra Akmanlar · Published 2024-12-23 · Updated 2025-09-05 · CVE-2024-51111

Positive Technologies (AI Summary)

CVSS v3.1

4.1

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Pnetlab version 5.3.11

Description: A Cross-Site Scripting (XSS) issue allows an attacker to inject malicious scripts into a web page, which are executed in the context of the victim's browser. This enables the attacker to potentially steal sensitive information or perform unauthorized actions on behalf of the victim.

Recommendations: For Pnetlab version 5.3.11, update to a newer version that contains a fix for this issue. If no specific fix is provided for this version, consider temporarily disabling any web page functionality that allows user input to mitigate the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-51111

Affected Products

Pnetlab

References · 9

• 🔥 https://github.com/Zehraakmanlar/Bortecine-s_CVEs/blob/main/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-51111 · Security Note
• https://osv.dev/vulnerability/CVE-2024-51111 · Vendor Advisory
• https://t.me/cvedetector/14368 · Telegram Post
• http://pnetlab.com · Note
• https://twitter.com/CVEnew/status/1876307498187022779 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1871198188931109152 · Twitter Post
• https://twitter.com/CVETracker/status/1876594383996240022 · Twitter Post
• https://t.me/cveNotify/134347 · Telegram Post