PT-2025-24925 · Unknown · Jetimob Plataforma Imobiliaria

Published 2025-06-10 · Updated 2025-06-10 · CVE-2024-41504

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Jetimob Plataforma Imobiliaria version 20240627-0

Description The issue concerns a Cross Site Scripting (XSS) problem. In the "Oportunidades" section of the application, when creating or editing an "Atividade", the form field "Descrico" allows injection of JavaScript.

Recommendations For Jetimob Plataforma Imobiliaria version 20240627-0, as a temporary workaround, consider restricting the use of the "Descrico" form field in the "Oportunidades" section until a patch is available. Avoid using this field for any input that may contain JavaScript code. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-41504

Affected Products

Jetimob Plataforma Imobiliaria

References · 6

• 🔥 https://github.com/rafaelbaldasso/CVE-2024-41504 · Exploit
• https://osv.dev/vulnerability/CVE-2024-41504 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41504 · Security Note
• https://twitter.com/CVEnew/status/1932562284586430756 · Twitter Post
• http://jetimob.com · Note
• https://t.me/cvetracker/25953 · Telegram Post