CVE-2024-7204

Katalog CVE

CVSS 6.1 · Medium EPSS 0,33%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada ai3 qbibot. Skor CVSS 3.1 6.1 (Medium) menurut cert.org.tw.

Deskripsi (NVD)

Ai3 QbiBot does not properly filter user input, allowing unauthenticated remote attackers to insert JavaScript code into the chat box. Once the recipient views the message, they will be subject to a Stored XSS attack.

Rincian

Terbit di NVD

2 Agustus 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.1 (Medium), sumber cert.org.tw
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

EPSS (30 hari)

0,33% peluang dieksploitasi; lebih tinggi dari 24,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.twcert.org.tw/en/cp-139-7975-3e810-2.html advisory pihak ketiga
• https://www.twcert.org.tw/tw/cp-132-7969-7827e-1.html advisory pihak ketiga