CVE-2024-7204

MEDIUM

6.1

Descripcion

Ai3 QbiBot does not properly filter user input, allowing unauthenticated remote attackers to insert JavaScript code into the chat box. Once the recipient views the message, they will be subject to a Stored XSS attack.

Detalles CVE

Puntuacion CVSS v3.16.1

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioREQUIRED

Publicado8/2/2024

Ultima modificacion9/11/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

ai3:qbibot

Debilidades (CWE)

CWE-79

Referencias

https://www.twcert.org.tw/en/cp-139-7975-3e810-2.html(twcert@cert.org.tw)

https://www.twcert.org.tw/tw/cp-132-7969-7827e-1.html(twcert@cert.org.tw)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.