CVEvulnerability
CVE-2024-0720
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-01-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.5 LOW — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
A vulnerability, which was classified as problematic, was found in FactoMineR FactoInvestigate up to 1.9. Affected is an unknown function of the component HTML Report Generator. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-251544. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected configurations
• factominer factoinvestigate (<= 1.9)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://drive.google.com/drive/folders/1ZFjWlD5axvhWp--I7tuiZ9uOpSBmU_f6?usp=drive_link Exploit
- https://github.com/beraoudabdelkhalek/research/tree/main/CVEs/CVE-2024-0720 github.com
- https://vuldb.com/?ctiid.251544 Permissions Required
- https://vuldb.com/?id.251544 Permissions Required
- https://drive.google.com/drive/folders/1ZFjWlD5axvhWp--I7tuiZ9uOpSBmU_f6?usp=drive_link Exploit
- https://github.com/beraoudabdelkhalek/research/tree/main/CVEs/CVE-2024-0720 github.com
- https://vuldb.com/?ctiid.251544 Permissions Required
- https://vuldb.com/?id.251544 Permissions Required