CVE-2024-50861 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

The ip_mod_dns_key_form.cgi request in GestioIP v3.5.7 is vulnerable to Stored XSS. An attacker can inject malicious code into the "TSIG Key" field, which is sa…
Medium CVSS: 6.1

CVE-2024-50861

The ip_mod_dns_key_form.cgi request in GestioIP v3.5.7 is vulnerable to Stored XSS. An attacker can inject malicious code into the "TSIG Key" field, which is saved in the database and triggers XSS when viewed, enabling data exfiltration and CSRF attacks.
Vendor
Gestioip
Product
Gestioip
CWE
CWE-79
Yayın Tarihi
2025-01-14 22:15:27
Güncelleme
2025-06-06 15:40:35
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-79 Gestioip MEDIUM Gestioip 2025

Referanslar

http://www.gestioip.net https://github.com/maxibelino/CVEs/tree/main/CVE-2024-50861 https://github.com/muebel/gestioip-docker-compose https://github.com/maxibelino/CVEs/tree/main/CVE-2024-50861