PT-2024-38614 · Exnet Informatics · Exnet Informatics Software Ferry Reservation System

Yağız Bi̇lgi̇li̇ · Published 2024-09-23 · Updated 2024-09-26 · CVE-2024-7835

Positive Technologies (AI Summary)

CVSS v4.0

8.8

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:L

Name of the Vulnerable Software and Affected Versions Exnet Informatics Software Ferry Reservation System versions prior to 240805-002

Description The issue affects the Exnet Informatics Software Ferry Reservation System, allowing Reflected XSS due to Improper Neutralization of Input During Web Page Generation. This is a type of Cross-site Scripting vulnerability.

Recommendations For versions prior to 240805-002, update the system to a version that includes the security patch to mitigate the risk of Reflected XSS. As a temporary workaround, consider restricting user input to minimize the risk of exploitation. Ensure that all user-generated content is properly sanitized before being displayed on the web page.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-7835

Affected Products

Exnet Informatics Software Ferry Reservation System

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2024-7835 · Security Note
• https://twitter.com/VulmonFeeds/status/1838246094670557631 · Twitter Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1518 · Note
• https://twitter.com/CveFindCom/status/1838186950127132678 · Twitter Post
• https://t.me/cvedetector/6181 · Telegram Post
• https://usom.gov.tr/bildirim/tr-24-1518 · Note
• https://twitter.com/oktsec/status/1838226321740099787 · Twitter Post
• https://twitter.com/CVEnew/status/1838180930365596135 · Twitter Post
• https://t.me/latest_high_impact_cve/1191 · Telegram Post
• https://t.me/cvenotify/95630 · Telegram Post