Medium severity6.5NVD Advisory· Published Apr 1, 2024· Updated Jun 17, 2026
CVE-2024-27609
CVE-2024-27609
Description
Bonita before 2023.2-u2 allows stored XSS via a UI screen in the administration panel.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.bonitasoft.console:bonita-web-serverMaven | < 10.1.0.W11 | 10.1.0.W11 |
org.bonitasoft.platform:platform-resourcesMaven | < 10.1.0.W11 | 10.1.0.W11 |
Affected products
2- ghsa-coords2 versionspkg:maven/org.bonitasoft.console/bonita-web-serverpkg:maven/org.bonitasoft.platform/platform-resources
< 10.1.0.W11+ 1 more
- (no CPE)range: < 10.1.0.W11
- (no CPE)range: < 10.1.0.W11
Patches
Vulnerability mechanics
References
7- github.com/advisories/GHSA-8vj9-5v5q-fhchghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2024-27609ghsaADVISORY
- documentation.bonitasoft.com/bonita/latest/release-notesnvdWEB
- github.com/bonitasoft/bonita-engine/commit/15dc60a99d97f9407b5089ba26f792cf3bd87f6bghsaWEB
- github.com/bonitasoft/bonita-engine/commit/26b24690a80dce11c0a4fa38ea54aeb35ca1e541ghsaWEB
- github.com/bonitasoft/bonita-engine/commit/2c84ea1a76f7e7f345c334645e46428e9376b0c9ghsaWEB
- github.com/bonitasoft/bonita-engine/commit/90469adf2b0ebf33f4c65b583f5c96284c8c1086ghsaWEB
News mentions
0No linked articles in our index yet.