CVE-2020-24390

Source
https://nvd.nist.gov/vuln/detail/CVE-2020-24390
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-24390.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2020-24390
Published
2020-08-27T16:15:11.503Z
Modified
2025-11-14T10:58:37.787128Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

eonweb in EyesOfNetwork before 5.3-7 does not properly escape the username on the /module/admin_logs page, which might allow pre-authentication stored XSS during login/logout logs recording.

References

Affected packages

Git / github.com/eyesofnetworkcommunity/eonweb

Affected ranges

Type
GIT
Repo
https://github.com/eyesofnetworkcommunity/eonweb
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Fixed

Affected versions

4.*

4.3-0

5.*

5.0-0
5.1-0
5.2-0
5.3-0
5.3-1
5.3-2
5.3-3
5.3-4
5.3-5
5.3-6