CVE-2024-8652 - Netcat CMS: reflected cross-site scripting in openstat module · CoreCVE

Back Back to CVE browser

MEDIUM

Netcat CMS: reflected cross-site scripting in openstat module

Published Sep 19, 2024

5.9

MEDIUM

CVSS 4.0

EPSS 0.28%

Description

A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific path on the site. This issue affects NetCat CMS v. 6.4.0.24126.2 and possibly others.

Apply patch from vendor https://netcat.ru/ https://netcat.ru/] . Versions 6.4.0.24248 and on have the patch.

Affected products

Vendor NetCat Product NetCat CMS Default
n/a
- Version
  6.4.0.24126.2
  Status
  affected
  Constraints
  -
- Version
  6.4.0.24248
  Status
  unaffected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
6.4.0.24126.2	affected	-
6.4.0.24248	unaffected	-

Remediation

Vendor solution

Apply patch from vendor https://netcat.ru/ https://netcat.ru/] . Versions 6.4.0.24248 and on have the patch.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

https://github.com/klsecservices/Advisories/blob/master/K-NetCat-2024-002.md
Third Party Advisory

Link	Providers	Tags
https://github.com/klsecservices/Advisories/blob/master/K-NetCat-2024-002.md		Third Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Kaspersky

Published Sep 19, 2024

Updated Sep 19, 2024

Reserved Sep 10, 2024

Link CVE-2024-8652

CISA Vulnrichment

Updated Sep 19, 2024

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-8652

Severity n/a

Public date n/a

Links CVE-2024-8652