Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2024-37783

Description

A reflected cross-site scripting (XSS) vulnerability in Gladinet CentreStack v13.12.9934.54690 allows attackers to inject malicious JavaScript into the web browser of a victim via the sessionId parameter at /portal/ForgotPassword.aspx.

POC

Reference

- https://medium.com/%40jkoreamo/centrestack-vulnerability-disclosure-d28dc8f21a56

- https://medium.com/@jkoreamo/centrestack-vulnerability-disclosure-d28dc8f21a56

Github

No PoCs found on GitHub currently.