CVE-2024-10652

IDExpert from CHANGING Information Technology does not properly validate a parameter for a specific functionality, allowing unauthenticated remote attackers to inject JavsScript code and perform Reflected Cross-site scripting attacks.

Score

CVSS 3.1 6.1 Medium

Status

Deferred - twcert@cert.org.tw

Published

2024-11-01

Last modified

2024-11-01

Weaknesses

CWE-79

Affected products

• Idexpert (Changing Information Technology)

References

• https://www.twcert.org.tw/en/cp-139-8173-f8bbc-2.html
• https://www.twcert.org.tw/tw/cp-132-8172-a02cc-1.html