CVE-2024-50859 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

The ip_import_acl_csv request in GestioIP v3.5.7 is vulnerable to Reflected XSS. When a user uploads an improperly formatted file, the content may be reflected…
Medium CVSS: 4.8

CVE-2024-50859

The ip_import_acl_csv request in GestioIP v3.5.7 is vulnerable to Reflected XSS. When a user uploads an improperly formatted file, the content may be reflected in the HTML response, allowing the attacker to execute malicious scripts or exfiltrate data.
Vendor
Gestioip
Product
Gestioip
CWE
CWE-79
Yayın Tarihi
2025-01-14 22:15:27
Güncelleme
2025-06-06 15:40:42
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-79 Gestioip MEDIUM Gestioip 2025

Referanslar

http://www.gestioip.net https://github.com/maxibelino/CVEs/tree/main/CVE-2024-50859 https://github.com/muebel/gestioip-docker-compose https://github.com/maxibelino/CVEs/tree/main/CVE-2024-50859