PT-2024-38581 · Unknown · Vsrm Supplier Relationship Management System

Yagiz Bilgili · CVE-2024-7787 · Published 2024-11-14 · Updated 2024-11-15

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L

Name of the Vulnerable Software and Affected Versions vSRM Supplier Relationship Management System versions prior to 28.08.2024

Description The issue affects the vSRM Supplier Relationship Management System, allowing Reflected XSS, or Cross-Site Scripting (XSS), due to improper neutralization of input during web page generation. This can lead to malicious script execution.

Recommendations For versions prior to 28.08.2024, upgrade the affected components immediately to resolve the issue. As a temporary workaround, consider restricting access to vulnerable components of the vSRM Supplier Relationship Management System to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-7787

Affected Products

Vsrm Supplier Relationship Management System

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-7787 · Security Note
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1853 · Note
• https://t.me/cvedetector/10909 · Telegram Post
• https://usom.gov.tr/bildirim/tr-24-1853 · Note
• https://t.me/cvenotify/101648 · Telegram Post
• https://twitter.com/CVEnew/status/1857065025845747874 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1857089804493553764 · Twitter Post
• https://twitter.com/oktsec/status/1857009994308145648 · Twitter Post