VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 27, 2024· Updated Aug 15, 2024

CVE-2024-26542

CVE-2024-26542

Description

Cross Site Scripting vulnerability in Bonitasoft, S.A v.7.14. and fixed in v.9.0.2, 8.0.3, 7.15.7, 7.14.8 allows attackers to execute arbitrary code via a crafted payload to the Groups Display name field.

Affected products

2
  • Bonitasoft, S.A/Bonitasoftdescription
  • Bonitasoft/Bonitallm-fuzzy
    Range: >=7.14.0, <7.14.8 || >=7.15.0, <7.15.7 || >=8.0.0, <8.0.3 || >=9.0.0, <9.0.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.