CVE-2024-8411

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-8411

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-8411.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2024-8411

Published

2024-09-04T15:15:15.510Z

Modified

2026-03-20T12:40:26.425283Z

Severity

4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVSS Calculator

Summary

[none]

Details

A vulnerability was determined in ABCD ABCD2 up to 2.2.0-beta-1. Impacted is an unknown function of the file /buscarintegrada.php. Executing a manipulation of the argument SubExpresion can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The developer explains, that "this script has been completely redesigned after this version".

References

Affected packages

Git / github.com/abcd-devcom/abcd2

Affected ranges

Type

GIT

Repo

https://github.com/abcd-devcom/abcd2

Events

Introduced

Last affected

689cc1998cab4e6318012d511c2a49801e06a632

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-alpha"
        }
    ]
}

Affected versions

v2.*

v2.2.0-alpha

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "2.2.0-beta0"
            }
        ]
    }
]

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-8411.json"