Skip to content

Instantly share code, notes, and snippets.

@whiteman007

whiteman007/CVE-2024-22985

Last active February 17, 2024 21:56
Show Gist options
  • Save whiteman007/de6f36e85c45085bfc1454811ca06f99 to your computer and use it in GitHub Desktop.
Save whiteman007/de6f36e85c45085bfc1454811ca06f99 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
CVE-2024-22985
CVE Identifier: CVE-2024-22985
Vulnerability Title: Cross-Site Scripting (XSS) in [adv ardius]
Vendor of Product: adv ardius
Vulnerability Description: CVE-2024-22985 refers to a Cross-Site Scripting (XSS) vulnerability present in [adv arduis]. This type of vulnerability allows attackers to inject malicious scripts into web pages viewed by other users. The injected scripts can be executed within the context of the victim's browser, potentially leading to the theft of sensitive information, session hijacking, or other malicious actions.
Root Cause: The vulnerability arises due to insufficient input sanitization in the adv arduis application, enabling attackers to inject malicious scripts into web pages.
Impact: Successful exploitation of this vulnerability can result in the compromise of user data, unauthorized access to sensitive information, session hijacking, and potentially the execution of arbitrary code within the context of the victim's browser.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment