CVE-2024-48937

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-48937
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-48937.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-48937
Downstream
Published
2024-10-11T21:15:07Z
Modified
2025-08-09T20:01:28Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed.

References

Affected packages