CVE-2024-6939 – A vulnerability was found in Xinhu RockOA 2.6.3 and classified as problematic. Affected …

Vuln ID: CVE-2024-6939

Published:  2024-07-21  05:15:04.310

Description: A vulnerability was found in Xinhu RockOA 2.6.3 and classified as problematic. Affected by this issue is the function okla of the file /webmain/public/upload/tpl_upload.html. The manipulation of the argument callback leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-271994 is the identifier assigned to this vulnerability.

Base Score: 3.5 – LOW

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Source: NVD.NIST.GOV

 

Date:

Categorie(s):

Tag(s):