HIGH
A stored XSS issue was discovered in Archer Platform 6 before version 2024.06
Published Jul 25, 2024
7.3
HIGHCVSS 3.1
EPSS 0.33%
Description
A stored XSS issue was discovered in Archer Platform 6 before version 2024.06. A remote authenticated malicious Archer user could potentially exploit this to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application. 6.14 P4 (6.14.0.4) is also a fixed release.
Affected products
No data.
-
- Version 0StatusaffectedConstraints<6.14.0.4
- Version
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (2)
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jul 25, 2024
Updated Aug 2, 2024
Reserved Jul 22, 2024
Link CVE-2024-41706
CISA Vulnrichment
Updated Jul 25, 2024