CVE-2024-36498

{"id": "CVE-2024-36498", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.7, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2024-12-12T13:15:10.540", "references": [{"url": "https://r.sec-consult.com/imageaccess", "source": "551230f0-3615-47bd-b7cc-93e92e730bbf"}, {"url": "https://www.imageaccess.de/?page=SupportPortal&lang=en", "source": "551230f0-3615-47bd-b7cc-93e92e730bbf"}, {"url": "http://seclists.org/fulldisclosure/2024/Dec/2", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "551230f0-3615-47bd-b7cc-93e92e730bbf", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users.\u00a0The \"Edit Disclaimer Text\" function of the configuration menu is vulnerable to stored XSS. Only the users Poweruser and Admin can use this function which is available at the URL\n\n\n\n\n\n\n\n\n\nhttps://$SCANNER/cgi/admin.cgi?-rdisclaimer+-apre\n\nThe stored Javascript payload will be executed every time the ScanWizard is loaded, even in the Kiosk-mode browser. Version 7.40 implemented a fix, but it could be bypassed via URL-encoding the Javascript payload again."}, {"lang": "es", "value": "Debido a la falta de desinfecci\u00f3n de la entrada, un atacante puede realizar ataques cross-site-scripting y ejecutar c\u00f3digo JavaScript arbitrario en el navegador de otros usuarios. La funci\u00f3n \"Editar texto de exenci\u00f3n de responsabilidad\" del men\u00fa de configuraci\u00f3n es vulnerable a XSS almacenado. Solo los usuarios Poweruser y Admin pueden usar esta funci\u00f3n, que est\u00e1 disponible en la URL https://$SCANNER/cgi/admin.cgi?-rdisclaimer+-apre el payload de JavaScript almacenado se ejecutar\u00e1 cada vez que se cargue ScanWizard, incluso en el navegador en modo kiosk. La versi\u00f3n 7.40 implement\u00f3 una soluci\u00f3n, pero se podr\u00eda omitir mediante la codificaci\u00f3n de URL del payload de JavaScript nuevamente."}], "lastModified": "2025-11-03T22:16:59.357", "sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf"}