CVE-2024-8215
CVE-2024-8215
8.7
HighPublished:
Last updated:
Source:769c9ae7-73c3-4e47-ae19-903170fc3eb8
Analyzed
Weakness (CWE)
CVSS Vector
v4.0- Attack Vector
- Network
- Attack Complexity
- High
- Attack Requirements
- Present
- Privileges Required
- High
- User Interaction
- Active
- Confidentiality (Vulnerable)
- High
- Integrity (Vulnerable)
- High
- Availability (Vulnerable)
- High
- Confidentiality (Subsequent)
- High
- Integrity (Subsequent)
- High
- Availability (Subsequent)
- High
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Payara Platform Payara Server (Admin Console modules) allows Remote Code Inclusion.This issue affects Payara Server: from 5.20.0 before 5.68.0, from 6.0.0 before 6.19.0, from 6.2022.1 before 6.2024.10, from 4.1.2.191.1 before 4.1.2.191.51.
References
769c9ae7-73c3-4e47-ae19-903170fc3eb8
https://docs.payara.fish/community/docs/Release%20Notes/Release%20Notes%206.2024.10.html769c9ae7-73c3-4e47-ae19-903170fc3eb8
https://docs.payara.fish/enterprise/docs/5.68.0/Release%20Notes/Release%20Notes%205.68.0.html769c9ae7-73c3-4e47-ae19-903170fc3eb8
https://docs.payara.fish/enterprise/docs/Release%20Notes/Release%20Notes%206.19.0.html