CVE-2024-38380

medium

Description

This vulnerability occurs when user-supplied input is improperly sanitized and then reflected back to the user's browser, allowing an attacker to execute arbitrary JavaScript in the context of the victim's browser session.

References

Advisories
References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-261-02

https://securityonline.info/vulnerabilities-found-in-proroute-h685t-w-4g-router-command-injection-and-xss-exposed/?&web_view=true

https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-10

Details

Source: Mitre, NVD

Published: 2024-09-17

Updated: 2024-10-02

Risk Information

CVSS v2

Base Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 5.4

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N