CVE-2024-46240
published 2024-10-22CVE-2024-46240: Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under action=system and the company/contact parameters under action=addcust…
PriorityP418medium4.8CVSS 3.1
AVNACLPRHUIRSCCLILAN
EPSS
0.34%
25.6th percentile
Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under action=system and the company/contact parameters under action=addcust within admin.php file.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| o-dyn | collabtive | — | — |
CVSS provenance
nvdv3.14.8MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
osv4.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2024-46240: Collabtive 3
osv·2024-10-22·CVSS 4.8
CVE-2024-46240 [MEDIUM] CVE-2024-46240: Collabtive 3
Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under action=system and the company/contact parameters under action=addcust within admin.php file.
GHSA
GHSA-r877-jc4p-mvhh: Collabtive 3
ghsa_unreviewed·2024-10-22
CVE-2024-46240 [MEDIUM] CWE-79 GHSA-r877-jc4p-mvhh: Collabtive 3
Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under action=system and the company/contact parameters under action=addcust within admin.php file.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-10-22
Published