CVE-2024-8863
published 2024-09-14CVE-2024-8863: A vulnerability, which was classified as problematic, was found in aimhubio aim up to 3.24. Affected is the function dangerouslySetInnerHTML of the file…
PriorityP430medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
EPSS
0.47%
37.2th percentile
A vulnerability, which was classified as problematic, was found in aimhubio aim up to 3.24. Affected is the function dangerouslySetInnerHTML of the file textbox.tsx of the component Text Explorer. The manipulation of the argument query leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected
27 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
| aimhubio | aim | — | — |
CVSS provenance
nvdv3.15.4MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
nvdv4.05.3MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Aim Stored XSS through TEXT EXPLORER
osv·2024-09-16
CVE-2024-8863 [MEDIUM] Aim Stored XSS through TEXT EXPLORER
Aim Stored XSS through TEXT EXPLORER
A vulnerability, which was classified as problematic, was found in aimhubio aim up to 3.24. Affected is the function dangerouslySetInnerHTML of the file textbox.tsx of the component Text Explorer. The manipulation of the argument query leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
GHSA
Aim Stored XSS through TEXT EXPLORER
ghsa·2024-09-16
CVE-2024-8863 [MEDIUM] CWE-79 Aim Stored XSS through TEXT EXPLORER
Aim Stored XSS through TEXT EXPLORER
A vulnerability, which was classified as problematic, was found in aimhubio aim up to 3.24. Affected is the function dangerouslySetInnerHTML of the file textbox.tsx of the component Text Explorer. The manipulation of the argument query leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-09-14
Published